last executing test programs:

36.202568783s ago: executing program 1 (id=475):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
socket(0x17, 0x1, 0x7ff)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb)
r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/disk', 0x20140, 0x12e)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000140)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})

35.733924291s ago: executing program 1 (id=477):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x512, &(0x7f0000000a00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000080)="4f1002f8839db50f6b17361b58", 0xd)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x78, 0x3, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2a3}, @NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x49fd}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0)
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r3, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={<r4=>0x0}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4, 0x76f2}, 0x90)

34.656118166s ago: executing program 1 (id=489):
socket(0x10, 0x3, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x400000000000004)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4)
r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0], 0x40}}, 0x0)
writev(r1, 0x0, 0x0)

34.153888326s ago: executing program 1 (id=495):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
io_setup(0x6, &(0x7f0000001380)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r0, 0x0}])
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84000, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
sync_file_range(0xffffffffffffffff, 0x6, 0x401, 0x7)

33.913873245s ago: executing program 1 (id=499):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
futimesat(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18)
mlock2(&(0x7f0000175000/0x1000)=nil, 0x1000, 0x1)

33.584401312s ago: executing program 1 (id=502):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

33.579507372s ago: executing program 32 (id=502):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

3.13769864s ago: executing program 0 (id=802):
sched_setattr(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
ioctl(0xffffffffffffffff, 0x8b1a, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18b4abbd58cc0acfef54b20a00379cce2e004fd6d57135b5897100"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xffe9, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040), 0x1, 0x512, &(0x7f0000000380)="$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")
r7 = socket(0xb, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r7, 0x11e, 0x39, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00')
socket(0x18, 0x800, 0x0)

2.161037098s ago: executing program 2 (id=812):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xa}, 0x18)
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000740)={0x9, 0xcf0d, 0x5, 0x7, 0x2, 0x4000, [{0x5, 0x9, 0xb1, '\x00', 0x901}, {0x5, 0x1, 0x1, '\x00', 0x1084}]})
epoll_create1(0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x4}}, './file0\x00'})
ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), 0x0}, 0x20)
r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0)

1.846997963s ago: executing program 4 (id=813):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)

1.815642205s ago: executing program 2 (id=814):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000740)={0x9, 0xcf0d, 0x5, 0x7, 0x2, 0x4000, [{0x5, 0x9, 0xb1, '\x00', 0x901}, {0x5, 0x1, 0x1, '\x00', 0x1084}]})
epoll_create1(0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r5=>r1, {0x4}}, './file0\x00'})
ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), 0x0}, 0x20)
r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0)

1.740866491s ago: executing program 4 (id=815):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)

1.694099645s ago: executing program 4 (id=817):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRES8=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x63}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0xa, &(0x7f00000002c0)=[{0x3, 0x10, 0x4, 0xffffff7f}, {0x5, 0x78, 0x7, 0x7ff}, {0x5, 0xa, 0x9, 0x80000001}, {0x1, 0x6, 0x4, 0x8}, {0x7, 0x4, 0x1, 0x4}, {0x40, 0x19, 0x5, 0x8}, {0x5, 0x2, 0xd, 0x7f58}, {0x3, 0x2, 0x1, 0x4927}, {0x390, 0xb, 0x5, 0xada18e6d}, {0x4, 0xa, 0x78, 0x92c}]}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000000080)=""/59}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x7fffffffffffffff}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0xc00)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f00000000c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r7, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0)

1.557926576s ago: executing program 3 (id=820):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x512, &(0x7f0000000a00)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000080)="4f1002f8839db50f6b17361b", 0xc)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340))
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x78, 0x3, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2a3}, @NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x49fd}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000200), &(0x7f0000000240)=0x8)

1.416490287s ago: executing program 0 (id=822):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40010)

1.317318145s ago: executing program 5 (id=823):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40010)

1.313077495s ago: executing program 0 (id=824):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x80)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
rt_sigprocmask(0x0, &(0x7f0000000480)={[0x400]}, 0x0, 0x8)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0)
ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000180))
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x40086602, &(0x7f0000000080)={@id={0x2, 0x0, @a}})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}})

1.24920427s ago: executing program 2 (id=825):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000740)={0x9, 0xcf0d, 0x5, 0x7, 0x2, 0x4000, [{0x5, 0x9, 0xb1, '\x00', 0x901}, {0x5, 0x1, 0x1, '\x00', 0x1084}]})
epoll_create1(0x0)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), 0x0}, 0x20)
r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0)
write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xfd44)

1.145506459s ago: executing program 5 (id=826):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x400000000000004)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

1.018003109s ago: executing program 4 (id=827):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)

918.654297ms ago: executing program 4 (id=828):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
socket$inet6(0xa, 0x1, 0x0)
getresgid(&(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000340))
socket(0x10, 0x803, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="da", 0x1, r2)
keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
rmdir(0x0)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r4 = dup(r3)
getsockopt$inet_buf(r4, 0x118, 0x25, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x8000000000000000, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000640)={0x2, 0x0, @loopback}, 0x10)
ppoll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x14a2}], 0x1, 0x0, 0x0, 0x0)

876.6754ms ago: executing program 2 (id=829):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)

805.749356ms ago: executing program 2 (id=830):
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
kcmp(0x0, 0x0, 0x6, r0, r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7ffc}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x90)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01102bbd7000000000001400000018000180140002006e657464657673696d300000000000000500190000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4044050}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xeea, 0xc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="15062cbd7000ffdbdf252a000000050037000000000008002f00000000000c00050000000000000000000a0001007770616e310000000500360000000000bf537064da3261ce1fa49fe986339459686f574ec54eab76"], 0x44}, 0x1, 0x0, 0x0, 0x801}, 0xc040)
syz_usbip_server_init(0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

725.854352ms ago: executing program 0 (id=831):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f00000002c0)}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x7fffffffffffffff}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0xc00)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f00000000c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r7, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$eJzs3U1rY1UcB+B/2vQtY5uq4+gMiAfdKEKcduHKTZEZEAtKtQMqCHdsqqFpU5pQiIhTV64EP4aoS3eC+AW6ceNaEES6cTkL8UqbjDNp0o522lSG59ncwznnd8+5veXCDedw9175cn1ttVlZzVoxUihEcXMsirdTpBiJ0ejYiRdu/PzL02+98+7rC4uL15ZSur7w9tzLKaWZZ35475Nvn/2xdeHGdzPfT8Tu7Pt7f8z/untp9/LeX99ErZlqzbTRaKUs3Ww0WtnNejWt1JprlZTerFezZjVNdse4275ab2xutlO2sTJd2tyqNpsp22intWo7tQqptdVO2YdZbSNVKpU0XQoexPLXt/M8j8jzsRiPPM/zqSjFhXgkpmMmyjEbj8Zj8XhcjCfiUjwZT8Xlg17nPW8AAAAAAAAAAAAAAAAAAAB4uNxn/3+hf///xHlPGQAAAAAAAAAAAAAAAAAAAB46h/f/FyN8/x8AAAAAAAAAAAAAAAAAAACG7D7f/z+0//9F+/8BAAAAAAAAAAAAAAAAAADgLEx2DkspTUasf769vL3cOXbqF1ajFvWoxtUox59xsPu/o1O+/tritavpwGy8tH6rm7+1vTzam58bK8dsYWB+rpNPvfmJKN2bn49yXBw8/vzA/GQ8/9x+/rNOvhLl+OmDaEQ9ViIK3as/yH86l9KrbyxO9eav7Pc70ugZ3xYAAAA4TZX0j/73951up4Htnabu+3nq9iwc8/vAoffzYlwpntdVc0ez/fFaVq9Xt05YGD/6POO9NVPdniceqxARWU98pvTb0v4pTzr5UyuMDnXQseP7PMA9jeL/4I95CoXfv7qnZjKGO/pI9x89q+8/P/9dKnby/EwnNj6oaeK41NHPjMIZP5MYnrs3/bxnAgAAAAAAAAAAwH8xcPXfVET0rQf8qK/mzvLw3nj/mY8e/YshXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+E38bU")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0)

700.583314ms ago: executing program 3 (id=832):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400000004000000040058cb05"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000008000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffe7}, 0x48)
socket$inet6(0xa, 0x1, 0xffffff51)
syz_emit_ethernet(0x76, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "19f14d", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@dstopts={0x2c, 0x4, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0xbf, 0x7, [0x0, 0x9]}}, @calipso={0x7, 0x8, {0x1, 0x0, 0x3, 0x401}}]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, "1d00"}}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x8, 0x8}, 0x50)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'geneve1\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
read$hiddev(0xffffffffffffffff, &(0x7f0000000600)=""/98, 0x62)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x61, 0x0, 0x61, 0x30, 0x0, 0x0, 0xf2]}}, &(0x7f0000001200)=""/100, 0x21, 0x64, 0x1, 0x44, 0x10000}, 0x28)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_ext={0x1c, 0x5, &(0x7f0000001100)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @generic={0x66, 0x5, 0x2, 0x5, 0x5}, @generic={0xd4, 0x3, 0x3, 0x3, 0xe}], &(0x7f0000001400)='syzkaller\x00', 0x401, 0x0, 0x0, 0x41000, 0x1, '\x00', r1, 0x0, r3, 0x8, &(0x7f00000012c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2201, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001300)=[{0x0, 0x3, 0xf}, {0x5, 0x3, 0x10, 0x9}], 0x10, 0xa44}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[], 0x40c4}}, 0x40050)

618.997491ms ago: executing program 5 (id=833):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xff00, &(0x7f0000000680), 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs")

516.803239ms ago: executing program 3 (id=834):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
statfs(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getxattr(0x0, &(0x7f00000000c0)=@known='user.incfs.size\x00', &(0x7f0000000340)=""/248, 0xf8)

456.061134ms ago: executing program 5 (id=835):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40010)

455.535974ms ago: executing program 3 (id=836):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111690000000000850000004400000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x652a82, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'})
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
setrlimit(0x9, &(0x7f0000000000))
io_setup(0x2004, &(0x7f0000000680))
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@broadcast, @private}, &(0x7f0000000180)=0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x0, 0x40, 0x97, 0x1, {{0xf, 0x4, 0x1, 0x34, 0x3c, 0x68, 0x0, 0x7, 0x29, 0x0, @loopback, @empty, {[@timestamp={0x44, 0x8, 0x33, 0x0, 0x0, [0x8]}, @generic={0x94, 0xd, "566f0771947c51f0b7c9cb"}, @generic={0x7, 0x3, "9a"}, @end, @generic={0x94, 0x8, "9d4542384e4d"}, @noop, @noop, @ra={0x94, 0x4}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0xfffffffd, 0x5, {{0x63, 0x4, 0x3, 0x6, 0x18c, 0x64, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp_prespec={0x44, 0x3c, 0x7e, 0x3, 0x2, [{@multicast1, 0x4}, {@remote, 0x80}, {@multicast2, 0x9}, {@rand_addr=0x64010102, 0xe5}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@broadcast, 0xfffffff7}]}, @ra={0x94, 0x4}, @generic={0x86, 0x12, "8414be6c62d3b3ad669bec6bcd0a96c6"}, @cipso={0x86, 0x3f, 0x3, [{0x5, 0x4, "be43"}, {0x7, 0x5, "d4c001"}, {0x0, 0xf, "a65281e708c48a741755196874"}, {0x5, 0x11, "0420eed840487ea5fc11b20fe44aa1"}, {0x5, 0x9, "6232d7e6bfbaf4"}, {0x7, 0x7, "3b0c33977f"}]}, @timestamp_prespec={0x44, 0x44, 0x60, 0x3, 0x8, [{@local, 0x6}, {@broadcast, 0x584}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x1}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x6}, {@remote, 0x4}, {@private=0xa010100, 0x401}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x43, 0xffffffffffffffff, [{0x5, 0x8, "42f11180c6c5"}, {0x2, 0x3, 'm'}, {0x7, 0x11, "c8f9f68919ee871274b7ffb51e39eb"}, {0x1, 0x4, 's\a'}, {0x2, 0x10, "f510b77d0ec16809d0ca8e78da24"}, {0x2, 0x4, 'W_'}, {0x6, 0x3, '6'}, {0x6, 0x6, "e9576fb5"}]}, @timestamp={0x44, 0x24, 0x58, 0x0, 0x7, [0xfffffff9, 0x101, 0x5, 0xfffffffa, 0x9, 0x8, 0x1, 0xd422]}, @cipso={0x86, 0x24, 0x0, [{0x6, 0xb, "89c5562f85cb6c1707"}, {0x1, 0xa, "8135e87e4763b963"}, {0x1, 0x9, "9fa3b14b310da4"}]}, @timestamp_addr={0x44, 0x14, 0x2b, 0x1, 0x0, [{@multicast1, 0x1000000}, {@rand_addr=0x64010102, 0x3}]}]}}}}})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r5], 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r10, r7, 0x25, 0x2, @val=@tcx}, 0x1c)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x0, 0x1fc, 0x0, 0xfffffc80, 0xffffff38, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x8, 0x80007, 0x4, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40000, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x7, 0x0, 0x0, 0x4, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4a74ccc9, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x40, 0x700, 0x3, 0x5, {{0xa, 0x4, 0x0, 0x38, 0x28, 0x67, 0x0, 0xc, 0x4, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x27}, {[@generic={0x44, 0xd, "151da64035a2e30a19e39b"}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0))

439.255705ms ago: executing program 3 (id=837):
socketpair(0x1e, 0x1, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2810, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @private=0xa010102}}}})
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0xff08, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4004) (fail_nth: 3)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r11, 0x0, 0x100000000}, 0x18)
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r12, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
dup(r12)

429.519136ms ago: executing program 0 (id=838):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRES8=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x63}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0xa, &(0x7f00000002c0)=[{0x3, 0x10, 0x4, 0xffffff7f}, {0x5, 0x78, 0x7, 0x7ff}, {0x5, 0xa, 0x9, 0x80000001}, {0x1, 0x6, 0x4, 0x8}, {0x7, 0x4, 0x1, 0x4}, {0x40, 0x19, 0x5, 0x8}, {0x5, 0x2, 0xd, 0x7f58}, {0x3, 0x2, 0x1, 0x4927}, {0x390, 0xb, 0x5, 0xada18e6d}, {0x4, 0xa, 0x78, 0x92c}]}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000000080)=""/59}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x7fffffffffffffff}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0xc00)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f00000000c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r7, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$eJzs3U1rY1UcB+B/2vQtY5uq4+gMiAfdKEKcduHKTZEZEAtKtQMqCHdsqqFpU5pQiIhTV64EP4aoS3eC+AW6ceNaEES6cTkL8UqbjDNp0o522lSG59ncwznnd8+5veXCDedw9175cn1ttVlZzVoxUihEcXMsirdTpBiJ0ejYiRdu/PzL02+98+7rC4uL15ZSur7w9tzLKaWZZ35475Nvn/2xdeHGdzPfT8Tu7Pt7f8z/untp9/LeX99ErZlqzbTRaKUs3Ww0WtnNejWt1JprlZTerFezZjVNdse4275ab2xutlO2sTJd2tyqNpsp22intWo7tQqptdVO2YdZbSNVKpU0XQoexPLXt/M8j8jzsRiPPM/zqSjFhXgkpmMmyjEbj8Zj8XhcjCfiUjwZT8Xlg17nPW8AAAAAAAAAAAAAAAAAAAB4uNxn/3+hf///xHlPGQAAAAAAAAAAAAAAAAAAAB46h/f/FyN8/x8AAAAAAAAAAAAAAAAAAACG7D7f/z+0//9F+/8BAAAAAAAAAAAAAAAAAADgLEx2DkspTUasf769vL3cOXbqF1ajFvWoxtUox59xsPu/o1O+/tritavpwGy8tH6rm7+1vTzam58bK8dsYWB+rpNPvfmJKN2bn49yXBw8/vzA/GQ8/9x+/rNOvhLl+OmDaEQ9ViIK3as/yH86l9KrbyxO9eav7Pc70ugZ3xYAAAA4TZX0j/73951up4Htnabu+3nq9iwc8/vAoffzYlwpntdVc0ez/fFaVq9Xt05YGD/6POO9NVPdniceqxARWU98pvTb0v4pTzr5UyuMDnXQseP7PMA9jeL/4I95CoXfv7qnZjKGO/pI9x89q+8/P/9dKnby/EwnNj6oaeK41NHPjMIZP5MYnrs3/bxnAgAAAAAAAAAAwH8xcPXfVET0rQf8qK/mzvLw3nj/mY8e/YshXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+E38bU")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0)

371.9581ms ago: executing program 5 (id=839):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)

329.949244ms ago: executing program 5 (id=840):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xa}, 0x18)
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000740)={0x9, 0xcf0d, 0x5, 0x7, 0x2, 0x4000, [{0x5, 0x9, 0xb1, '\x00', 0x901}, {0x5, 0x1, 0x1, '\x00', 0x1084}]})
epoll_create1(0x0)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), 0x0}, 0x20)
r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0)
write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xfd44)

192.215675ms ago: executing program 3 (id=841):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007a7d0e4b6e2659a6d9cbfe36418b892ff096ab68c4b942d4ea4d82e318f525d2"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000), 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000840)='.log\x00', 0x341482, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x5, 0x5e9a}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})

66.228275ms ago: executing program 2 (id=842):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007a7d0e4b6e2659a6d9cbfe36418b892ff096ab68c4b942d4ea4d82e318f525d2"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000), 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000840)='.log\x00', 0x341482, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x5, 0x5e9a}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})

65.710645ms ago: executing program 4 (id=843):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
close_range(0xffffffffffffffff, r1, 0x2)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r2, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
close_range(r9, r9, 0x200000000000000)
sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x60, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "21872b20c62a66b8"}}, 0x48}}, 0x81)
sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0)

0s ago: executing program 0 (id=844):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
close_range(0xffffffffffffffff, r1, 0x2)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r2, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
close_range(r8, r8, 0x200000000000000)
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x60, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "21872b20c62a66b8"}}, 0x48}}, 0x81)
sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

 Buffer I/O error on dev loop9, logical block 0, async page read
[   67.648860][ T4629] Buffer I/O error on dev loop9, logical block 0, async page read
[   67.656772][ T4629]  loop9: unable to read partition table
[   67.662498][ T4629] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   67.662498][ T4629] 
) failed (rc=-5)
[   67.765940][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   67.943797][ T4634] bridge_slave_0: left allmulticast mode
[   67.949506][ T4634] bridge_slave_0: left promiscuous mode
[   67.955227][ T4634] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.055889][ T4634] bridge_slave_1: left allmulticast mode
[   68.061600][ T4634] bridge_slave_1: left promiscuous mode
[   68.067467][ T4634] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.128332][ T4634] bond0: (slave bond_slave_0): Releasing backup interface
[   68.156507][ T4634] bond0: (slave bond_slave_1): Releasing backup interface
[   68.160423][ T4646] loop2: detected capacity change from 0 to 512
[   68.183734][ T4634] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.191243][ T4634] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.195781][ T4650] loop4: detected capacity change from 0 to 512
[   68.224094][ T4634] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.231598][ T4634] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.250971][ T4650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   68.268938][ T4650] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.447090][ T4657] netlink: 'syz.3.352': attribute type 10 has an invalid length.
[   68.525503][ T4665] loop3: detected capacity change from 0 to 512
[   68.564160][ T4665] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   68.576194][ T4665] EXT4-fs (loop3): 1 truncate cleaned up
[   68.586749][ T4665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.608478][ T4670] loop1: detected capacity change from 0 to 512
[   68.869590][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.006339][ T4679] loop3: detected capacity change from 0 to 512
[   69.400036][ T4679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   69.455889][ T4679] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.575331][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   69.708767][ T4686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'.
[   69.901724][ T4632] loop0: detected capacity change from 0 to 8192
[   69.931954][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   69.992332][ T4696] loop3: detected capacity change from 0 to 512
[   70.012688][ T4695] loop4: detected capacity change from 0 to 512
[   70.055080][ T4696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   70.091138][ T4696] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.126103][ T4707] loop4: detected capacity change from 0 to 512
[   70.134471][ T4705] loop1: detected capacity change from 0 to 128
[   70.204124][ T4707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   70.218079][ T4707] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.234191][ T4713] loop0: detected capacity change from 0 to 512
[   70.242630][ T4713] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   70.261539][ T4713] EXT4-fs (loop0): 1 truncate cleaned up
[   70.269301][ T4713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.284459][ T4718] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000)
[   70.292365][ T4718] FAT-fs (loop1): Filesystem has been set read-only
[   70.307166][ T4718] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000)
[   70.412162][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.536492][ T4727] loop2: detected capacity change from 0 to 512
[   70.574125][ T4727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   70.610790][ T4727] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.706527][ T4705] syz.1.365: attempt to access beyond end of device
[   70.706527][ T4705] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[   70.720425][ T4705] buffer_io_error: 4 callbacks suppressed
[   70.720456][ T4705] Buffer I/O error on dev loop1, logical block 128, lost async page write
[   70.735921][ T4705] syz.1.365: attempt to access beyond end of device
[   70.735921][ T4705] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[   70.749419][ T4705] Buffer I/O error on dev loop1, logical block 128, lost async page write
[   70.778009][   T29] kauditd_printk_skb: 350 callbacks suppressed
[   70.778078][   T29] audit: type=1326 audit(1756174983.473:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[   70.812220][   T29] audit: type=1326 audit(1756174983.473:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[   70.835590][   T29] audit: type=1326 audit(1756174983.473:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[   70.858939][   T29] audit: type=1326 audit(1756174983.473:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[   70.882433][   T29] audit: type=1326 audit(1756174983.473:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[   70.905744][   T29] audit: type=1326 audit(1756174983.473:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[   70.929346][   T29] audit: type=1326 audit(1756174983.473:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[   70.952756][   T29] audit: type=1326 audit(1756174983.473:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[   70.976150][   T29] audit: type=1326 audit(1756174983.473:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[   70.999633][   T29] audit: type=1326 audit(1756174983.473:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[   71.243080][ T4742] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   71.252488][ T4742] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[   71.300171][ T4735] loop0: detected capacity change from 0 to 8192
[   71.342460][ T4744] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   71.397471][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   71.444386][ T4749] loop4: detected capacity change from 0 to 512
[   71.454636][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   71.455858][ T4750] loop1: detected capacity change from 0 to 512
[   71.478752][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   71.495754][ T4750] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   71.516887][ T4749] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   71.528156][ T4750] EXT4-fs (loop1): 1 truncate cleaned up
[   71.555494][ T4750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.577160][ T4757] loop2: detected capacity change from 0 to 512
[   71.588739][ T4759] loop3: detected capacity change from 0 to 512
[   71.616939][ T4757] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[   71.625800][ T4749] EXT4-fs (loop4): 1 truncate cleaned up
[   71.646609][ T4749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.659644][ T4757] EXT4-fs (loop2): orphan cleanup on readonly fs
[   71.672688][ T4757] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   71.673907][ T4759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   71.722766][ T4759] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.741073][ T4757] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   71.767094][ T4757] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #13: comm syz.2.382: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   71.785178][ T4757] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.382: couldn't read orphan inode 13 (err -117)
[   71.798320][ T4767] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[   71.812563][ T4757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   71.815757][ T4767] SELinux: failed to load policy
[   71.907740][ T4757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.908174][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   71.972813][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.972838][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.243963][ T4787] loop1: detected capacity change from 0 to 512
[   72.339807][ T4789] loop2: detected capacity change from 0 to 512
[   72.385022][ T4789] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   72.427801][ T4787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   72.450987][ T4789] EXT4-fs (loop2): 1 truncate cleaned up
[   72.479181][ T4789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.492307][ T4787] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.553875][ T4785] loop3: detected capacity change from 0 to 8192
[   72.644637][ T4794] loop4: detected capacity change from 0 to 512
[   72.704611][ T4794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   72.758479][ T4756] Set syz1 is full, maxelem 65536 reached
[   72.765891][ T4794] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.893973][ T4803] loop3: detected capacity change from 0 to 512
[   72.894412][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.914286][ T4803] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   72.927561][ T4803] EXT4-fs (loop3): 1 truncate cleaned up
[   72.942273][ T4803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.997754][ T4808] loop2: detected capacity change from 0 to 512
[   73.030176][ T4808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   73.043574][ T4808] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.145163][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   73.183284][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   73.216023][ T4813] loop2: detected capacity change from 0 to 512
[   73.231988][ T4813] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   73.247843][ T4815] loop1: detected capacity change from 0 to 512
[   73.323164][ T4813] EXT4-fs (loop2): 1 truncate cleaned up
[   73.335199][ T4815] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   73.336531][ T4813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.395015][ T4815] EXT4-fs (loop1): 1 truncate cleaned up
[   73.412458][ T4815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.534617][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.565188][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.574627][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   73.579790][ T4820] loop3: detected capacity change from 0 to 512
[   73.591766][ T4813] SELinux: failed to load policy
[   73.642108][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.659212][ T4826] loop4: detected capacity change from 0 to 128
[   73.665652][ T4823] loop1: detected capacity change from 0 to 128
[   73.705823][ T4830] dvmrp31: entered allmulticast mode
[   73.824023][ T4849] mmap: syz.1.404 (4849) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   73.836448][ T4849] FAULT_INJECTION: forcing a failure.
[   73.836448][ T4849] name failslab, interval 1, probability 0, space 0, times 1
[   73.849178][ T4849] CPU: 1 UID: 0 PID: 4849 Comm: syz.1.404 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   73.849203][ T4849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   73.849216][ T4849] Call Trace:
[   73.849223][ T4849]  <TASK>
[   73.849231][ T4849]  __dump_stack+0x1d/0x30
[   73.849280][ T4849]  dump_stack_lvl+0xe8/0x140
[   73.849315][ T4849]  dump_stack+0x15/0x1b
[   73.849373][ T4849]  should_fail_ex+0x265/0x280
[   73.849397][ T4849]  should_failslab+0x8c/0xb0
[   73.849426][ T4849]  kmem_cache_alloc_noprof+0x50/0x310
[   73.849458][ T4849]  ? skb_clone+0x151/0x1f0
[   73.849551][ T4849]  skb_clone+0x151/0x1f0
[   73.849639][ T4849]  __netlink_deliver_tap+0x2c9/0x500
[   73.849695][ T4849]  netlink_unicast+0x66b/0x690
[   73.849736][ T4849]  netlink_sendmsg+0x58b/0x6b0
[   73.849764][ T4849]  ? __pfx_netlink_sendmsg+0x10/0x10
[   73.849863][ T4849]  __sock_sendmsg+0x145/0x180
[   73.849892][ T4849]  ____sys_sendmsg+0x31e/0x4e0
[   73.849921][ T4849]  ___sys_sendmsg+0x17b/0x1d0
[   73.849970][ T4849]  __x64_sys_sendmsg+0xd4/0x160
[   73.850001][ T4849]  x64_sys_call+0x191e/0x2ff0
[   73.850026][ T4849]  do_syscall_64+0xd2/0x200
[   73.850096][ T4849]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   73.850124][ T4849]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   73.850151][ T4849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.850176][ T4849] RIP: 0033:0x7f16b852ebe9
[   73.850191][ T4849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.850206][ T4849] RSP: 002b:00007f16b6f6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   73.850224][ T4849] RAX: ffffffffffffffda RBX: 00007f16b8756090 RCX: 00007f16b852ebe9
[   73.850254][ T4849] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[   73.850269][ T4849] RBP: 00007f16b6f6e090 R08: 0000000000000000 R09: 0000000000000000
[   73.850282][ T4849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   73.850305][ T4849] R13: 00007f16b8756128 R14: 00007f16b8756090 R15: 00007ffcefb6e678
[   73.850327][ T4849]  </TASK>
[   74.058472][ T4849] netlink: 'syz.1.404': attribute type 13 has an invalid length.
[   74.102988][ T4849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.124822][ T4851] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000)
[   74.132713][ T4851] FAT-fs (loop4): Filesystem has been set read-only
[   74.145522][ T4851] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000)
[   74.164526][ T4845] loop9: detected capacity change from 0 to 7
[   74.171015][ T4845] Buffer I/O error on dev loop9, logical block 0, async page read
[   74.179130][ T4845] Buffer I/O error on dev loop9, logical block 0, async page read
[   74.187037][ T4845]  loop9: unable to read partition table
[   74.192952][ T4845] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   74.192952][ T4845] 
) failed (rc=-5)
[   74.198159][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   74.224696][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   74.233568][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   74.241561][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   74.269330][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   74.322579][ T4862] loop2: detected capacity change from 0 to 512
[   74.495582][ T4843] syz.4.400: attempt to access beyond end of device
[   74.495582][ T4843] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[   74.508974][ T4843] Buffer I/O error on dev loop4, logical block 128, lost async page write
[   74.520180][ T4855] random: crng reseeded on system resumption
[   74.639863][ T4843] syz.4.400: attempt to access beyond end of device
[   74.639863][ T4843] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[   74.656433][ T4862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   74.691228][ T4862] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.736979][ T4870] loop3: detected capacity change from 0 to 512
[   74.783615][ T4874] loop4: detected capacity change from 0 to 512
[   74.790338][ T4873] loop1: detected capacity change from 0 to 512
[   74.797941][ T4874] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   74.820091][ T4874] EXT4-fs (loop4): 1 truncate cleaned up
[   74.837797][ T4873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   74.853279][ T4874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.871199][ T4873] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.952113][ T4885] FAULT_INJECTION: forcing a failure.
[   74.952113][ T4885] name failslab, interval 1, probability 0, space 0, times 0
[   74.964848][ T4885] CPU: 1 UID: 0 PID: 4885 Comm: syz.0.418 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   74.964876][ T4885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   74.964886][ T4885] Call Trace:
[   74.964892][ T4885]  <TASK>
[   74.964899][ T4885]  __dump_stack+0x1d/0x30
[   74.964919][ T4885]  dump_stack_lvl+0xe8/0x140
[   74.964937][ T4885]  dump_stack+0x15/0x1b
[   74.965011][ T4885]  should_fail_ex+0x265/0x280
[   74.965036][ T4885]  should_failslab+0x8c/0xb0
[   74.965060][ T4885]  kmem_cache_alloc_noprof+0x50/0x310
[   74.965162][ T4885]  ? audit_log_start+0x365/0x6c0
[   74.965243][ T4885]  audit_log_start+0x365/0x6c0
[   74.965364][ T4885]  audit_seccomp+0x48/0x100
[   74.965395][ T4885]  ? __seccomp_filter+0x68c/0x10d0
[   74.965419][ T4885]  __seccomp_filter+0x69d/0x10d0
[   74.965439][ T4885]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   74.965471][ T4885]  ? vfs_write+0x7e8/0x960
[   74.965493][ T4885]  ? putname+0xda/0x100
[   74.965521][ T4885]  ? __rcu_read_unlock+0x4f/0x70
[   74.965624][ T4885]  ? __fget_files+0x184/0x1c0
[   74.965656][ T4885]  __secure_computing+0x82/0x150
[   74.965730][ T4885]  syscall_trace_enter+0xcf/0x1e0
[   74.965765][ T4885]  do_syscall_64+0xac/0x200
[   74.965795][ T4885]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   74.965821][ T4885]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   74.965851][ T4885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.965873][ T4885] RIP: 0033:0x7f8041a3ebe9
[   74.966024][ T4885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.966059][ T4885] RSP: 002b:00007f804049f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc
[   74.966078][ T4885] RAX: ffffffffffffffda RBX: 00007f8041c65fa0 RCX: 00007f8041a3ebe9
[   74.966092][ T4885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   74.966106][ T4885] RBP: 00007f804049f090 R08: 0000000000000000 R09: 0000000000000000
[   74.966159][ T4885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   74.966171][ T4885] R13: 00007f8041c66038 R14: 00007f8041c65fa0 R15: 00007ffd4aabce58
[   74.966193][ T4885]  </TASK>
[   75.189510][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   75.217192][ T4890] loop0: detected capacity change from 0 to 512
[   75.219134][ T4874] SELinux: failed to load policy
[   75.238994][ T4890] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   75.353053][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   75.362542][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.372709][ T4890] EXT4-fs (loop0): 1 truncate cleaned up
[   75.379497][ T4890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.392746][ T4900] loop1: detected capacity change from 0 to 8192
[   75.511745][ T4908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'.
[   75.563885][ T4907] netlink: 68 bytes leftover after parsing attributes in process `syz.2.423'.
[   75.787758][   T29] kauditd_printk_skb: 268 callbacks suppressed
[   75.787856][   T29] audit: type=1326 audit(1756174988.483:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   75.912545][ T4913] loop4: detected capacity change from 0 to 512
[   75.944697][   T29] audit: type=1326 audit(1756174988.513:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   75.968290][   T29] audit: type=1326 audit(1756174988.513:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   75.991790][   T29] audit: type=1326 audit(1756174988.513:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   76.015214][   T29] audit: type=1326 audit(1756174988.513:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   76.038741][   T29] audit: type=1326 audit(1756174988.513:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   76.062213][   T29] audit: type=1326 audit(1756174988.513:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   76.085465][   T29] audit: type=1326 audit(1756174988.513:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   76.108955][   T29] audit: type=1326 audit(1756174988.513:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   76.132591][   T29] audit: type=1326 audit(1756174988.513:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   76.201704][ T4918] syzkaller0: entered promiscuous mode
[   76.230528][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.263269][ T4922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'.
[   76.323885][ T4926] loop2: detected capacity change from 0 to 512
[   76.365536][ T4926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   76.386858][ T4926] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.466434][ T4937] loop4: detected capacity change from 0 to 512
[   76.490982][ T4937] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   76.525776][ T4937] EXT4-fs (loop4): 1 truncate cleaned up
[   76.552005][ T4937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.591514][ T4941] syz.0.438 (4941) used greatest stack depth: 9520 bytes left
[   76.786046][ T4953] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[   76.835938][ T4953] SELinux: failed to load policy
[   76.841022][ T4955] SELinux:  policydb version -1973046224 does not match my version range 15-35
[   76.861199][ T4957] openvswitch: netlink: Message has 6 unknown bytes.
[   76.866686][ T4955] SELinux: failed to load policy
[   76.916902][ T4960] FAULT_INJECTION: forcing a failure.
[   76.916902][ T4960] name failslab, interval 1, probability 0, space 0, times 0
[   76.929677][ T4960] CPU: 1 UID: 0 PID: 4960 Comm: syz.1.443 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   76.929730][ T4960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   76.929743][ T4960] Call Trace:
[   76.929751][ T4960]  <TASK>
[   76.929761][ T4960]  __dump_stack+0x1d/0x30
[   76.929786][ T4960]  dump_stack_lvl+0xe8/0x140
[   76.929878][ T4960]  dump_stack+0x15/0x1b
[   76.929898][ T4960]  should_fail_ex+0x265/0x280
[   76.929923][ T4960]  should_failslab+0x8c/0xb0
[   76.929950][ T4960]  kmem_cache_alloc_noprof+0x50/0x310
[   76.930042][ T4960]  ? security_file_alloc+0x32/0x100
[   76.930133][ T4960]  security_file_alloc+0x32/0x100
[   76.930164][ T4960]  init_file+0x5c/0x1d0
[   76.930208][ T4960]  alloc_empty_file+0x8b/0x200
[   76.930270][ T4960]  alloc_file_pseudo+0xc6/0x160
[   76.930303][ T4960]  __shmem_file_setup+0x1de/0x210
[   76.930450][ T4960]  shmem_file_setup+0x3b/0x50
[   76.930486][ T4960]  __se_sys_memfd_create+0x2c3/0x590
[   76.930529][ T4960]  __x64_sys_memfd_create+0x31/0x40
[   76.930555][ T4960]  x64_sys_call+0x2abe/0x2ff0
[   76.930579][ T4960]  do_syscall_64+0xd2/0x200
[   76.930610][ T4960]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   76.930649][ T4960]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   76.930678][ T4960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.930703][ T4960] RIP: 0033:0x7f16b852ebe9
[   76.930722][ T4960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.930805][ T4960] RSP: 002b:00007f16b6f8ed68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   76.930828][ T4960] RAX: ffffffffffffffda RBX: 0000000000000593 RCX: 00007f16b852ebe9
[   76.930922][ T4960] RDX: 00007f16b6f8edec RSI: 0000000000000000 RDI: 00007f16b85b27e8
[   76.930934][ T4960] RBP: 00002000000005c0 R08: 00007f16b6f8eb07 R09: 0000000000000000
[   76.930945][ T4960] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000002
[   76.930956][ T4960] R13: 00007f16b6f8edec R14: 00007f16b6f8edf0 R15: 00007ffcefb6e678
[   76.930973][ T4960]  </TASK>
[   77.144705][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.195196][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   77.224204][ T4968] loop1: detected capacity change from 0 to 512
[   77.246046][ T4970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.447'.
[   77.264175][ T4968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   77.278475][ T4968] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.311376][ T4974] loop2: detected capacity change from 0 to 512
[   77.368007][ T4980] loop4: detected capacity change from 0 to 512
[   77.385981][ T4974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   77.399491][ T4974] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.428673][ T4980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   77.455650][ T4980] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.663986][ T4920] loop3: detected capacity change from 0 to 8192
[   78.186992][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   78.278834][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   78.306601][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   78.388260][ T5001] loop1: detected capacity change from 0 to 512
[   78.414547][ T5001] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   78.458482][ T5001] EXT4-fs (loop1): 1 truncate cleaned up
[   78.469468][ T5010] loop2: detected capacity change from 0 to 128
[   78.476396][ T5001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.493987][ T5011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.456'.
[   78.583392][ T5013] loop3: detected capacity change from 0 to 128
[   78.651007][ T5016] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000)
[   78.659178][ T5016] FAT-fs (loop2): Filesystem has been set read-only
[   78.665448][ T5001] SELinux: failed to load policy
[   78.683113][ T5016] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000)
[   78.787499][ T5021] random: crng reseeded on system resumption
[   78.853979][ T5022] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000)
[   78.861891][ T5022] FAT-fs (loop3): Filesystem has been set read-only
[   78.918153][ T5022] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000)
[   79.041581][ T5014] syz.2.457: attempt to access beyond end of device
[   79.041581][ T5014] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128
[   79.054901][ T5030] loop0: detected capacity change from 0 to 512
[   79.061212][ T5014] buffer_io_error: 1 callbacks suppressed
[   79.061226][ T5014] Buffer I/O error on dev loop2, logical block 128, lost async page write
[   79.077050][ T5010] syz.2.457: attempt to access beyond end of device
[   79.077050][ T5010] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128
[   79.090539][ T5010] Buffer I/O error on dev loop2, logical block 128, lost async page write
[   79.101987][ T5010] syz.2.457: attempt to access beyond end of device
[   79.101987][ T5010] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128
[   79.115432][ T5010] Buffer I/O error on dev loop2, logical block 128, lost async page write
[   79.168788][ T5030] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.205967][ T5013] syz.3.459: attempt to access beyond end of device
[   79.205967][ T5013] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[   79.219453][ T5013] Buffer I/O error on dev loop3, logical block 128, lost async page write
[   79.228865][ T5020] syz.3.459: attempt to access beyond end of device
[   79.228865][ T5020] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[   79.242249][ T5020] Buffer I/O error on dev loop3, logical block 128, lost async page write
[   79.251432][ T5020] syz.3.459: attempt to access beyond end of device
[   79.251432][ T5020] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[   79.264882][ T5020] Buffer I/O error on dev loop3, logical block 128, lost async page write
[   79.803198][ T5043] netlink: 256 bytes leftover after parsing attributes in process `syz.1.467'.
[   79.903738][ T5043] geneve2: entered promiscuous mode
[   79.908995][ T5043] geneve2: entered allmulticast mode
[   79.924294][ T1377] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 53105 - 0
[   79.933231][ T1377] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 34561 - 0
[   79.943852][ T1377] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 53105 - 0
[   79.952750][ T1377] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 34561 - 0
[   79.963336][ T1377] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 53105 - 0
[   79.972187][ T1377] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 34561 - 0
[   79.988772][ T5048] loop0: detected capacity change from 0 to 512
[   79.995165][ T1377] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 53105 - 0
[   80.004203][ T1377] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 34561 - 0
[   80.014097][ T5048] EXT4-fs: Ignoring removed nobh option
[   80.022700][ T5048] EXT4-fs (loop0): failed to initialize system zone (-117)
[   80.031550][ T5048] EXT4-fs (loop0): mount failed
[   80.107794][ T5053] loop3: detected capacity change from 0 to 512
[   80.116471][ T5053] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   80.138160][ T5053] EXT4-fs (loop3): 1 truncate cleaned up
[   80.139505][ T5056] netlink: 'syz.0.472': attribute type 2 has an invalid length.
[   80.268871][ T5064] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[   80.285259][ T5059] loop2: detected capacity change from 0 to 512
[   80.307839][ T5059] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   80.351111][ T5064] SELinux: failed to load policy
[   80.358549][ T5059] EXT4-fs (loop2): 1 truncate cleaned up
[   80.372864][ T5068] loop9: detected capacity change from 0 to 7
[   80.379179][ T5068] Buffer I/O error on dev loop9, logical block 0, async page read
[   80.387087][ T5068] Buffer I/O error on dev loop9, logical block 0, async page read
[   80.395121][ T5068]  loop9: unable to read partition table
[   80.400805][ T5068] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   80.400805][ T5068] 
) failed (rc=-5)
[   80.419383][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   80.441831][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   80.518132][ T5066] netlink: 32 bytes leftover after parsing attributes in process `syz.0.473'.
[   80.557173][ T5028] loop4: detected capacity change from 0 to 8192
[   80.737482][ T5074] loop1: detected capacity change from 0 to 512
[   80.802352][ T5074] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.963913][ T5087] netlink: 'syz.0.479': attribute type 10 has an invalid length.
[   80.971744][   T29] kauditd_printk_skb: 280 callbacks suppressed
[   80.971757][   T29] audit: type=1326 audit(1756174993.663:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f6b46d550 code=0x7ffc0000
[   81.001592][   T29] audit: type=1326 audit(1756174993.663:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f2f6b46d937 code=0x7ffc0000
[   81.002341][ T5087] team0: Device hsr_slave_0 failed to register rx_handler
[   81.038088][   T29] audit: type=1326 audit(1756174993.663:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f6b46d550 code=0x7ffc0000
[   81.062000][   T29] audit: type=1326 audit(1756174993.673:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b46ebe9 code=0x7ffc0000
[   81.085419][   T29] audit: type=1326 audit(1756174993.693:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b46ebe9 code=0x7ffc0000
[   81.162078][   T29] audit: type=1326 audit(1756174993.863:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b46ebe9 code=0x7ffc0000
[   81.211313][   T29] audit: type=1326 audit(1756174993.863:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b46ebe9 code=0x7ffc0000
[   81.234757][   T29] audit: type=1326 audit(1756174993.863:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6b46ebe9 code=0x7ffc0000
[   81.258506][   T29] audit: type=1326 audit(1756174993.863:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b46ebe9 code=0x7ffc0000
[   81.281963][   T29] audit: type=1326 audit(1756174993.863:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b46ebe9 code=0x7ffc0000
[   81.318685][ T5096] loop3: detected capacity change from 0 to 512
[   81.344498][ T5096] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.388688][ T5102] loop4: detected capacity change from 0 to 512
[   81.407639][ T5102] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   81.431218][ T5102] EXT4-fs (loop4): 1 truncate cleaned up
[   81.618287][ T5108] loop2: detected capacity change from 0 to 512
[   81.695256][ T5108] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   81.713467][ T5110] loop4: detected capacity change from 0 to 512
[   81.738019][ T5108] EXT4-fs (loop2): 1 truncate cleaned up
[   81.759270][ T5110] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   81.770646][ T5110] EXT4-fs (loop4): 1 truncate cleaned up
[   81.869433][ T5117] loop0: detected capacity change from 0 to 2048
[   81.913967][ T5117] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.488: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   81.947694][ T5117] EXT4-fs (loop0): Remounting filesystem read-only
[   81.960665][ T5120] SELinux: failed to load policy
[   81.972376][ T5124] netlink: 32 bytes leftover after parsing attributes in process `syz.1.489'.
[   82.084841][ T5128] netlink: 'syz.4.490': attribute type 10 has an invalid length.
[   82.100984][ T5128] team0: Device hsr_slave_0 failed to register rx_handler
[   82.317990][ T5136] loop0: detected capacity change from 0 to 8192
[   82.330042][ T5146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'.
[   82.338726][ T5144] loop3: detected capacity change from 0 to 512
[   82.338981][ T5146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'.
[   82.355268][ T5146] FAULT_INJECTION: forcing a failure.
[   82.355268][ T5146] name failslab, interval 1, probability 0, space 0, times 0
[   82.368172][ T5146] CPU: 1 UID: 0 PID: 5146 Comm: syz.2.497 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   82.368201][ T5146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   82.368212][ T5146] Call Trace:
[   82.368219][ T5146]  <TASK>
[   82.368227][ T5146]  __dump_stack+0x1d/0x30
[   82.368252][ T5146]  dump_stack_lvl+0xe8/0x140
[   82.368290][ T5146]  dump_stack+0x15/0x1b
[   82.368305][ T5146]  should_fail_ex+0x265/0x280
[   82.368392][ T5146]  ? nft_netdev_hook_alloc+0x15e/0x340
[   82.368419][ T5146]  should_failslab+0x8c/0xb0
[   82.368492][ T5146]  __kmalloc_cache_noprof+0x4c/0x320
[   82.368518][ T5146]  nft_netdev_hook_alloc+0x15e/0x340
[   82.368577][ T5146]  nft_chain_parse_hook+0x587/0xa40
[   82.368640][ T5146]  nf_tables_newchain+0xba4/0x17d0
[   82.368682][ T5146]  ? __nla_parse+0x40/0x60
[   82.368709][ T5146]  nfnetlink_rcv+0xb96/0x1690
[   82.368839][ T5146]  netlink_unicast+0x5bd/0x690
[   82.368914][ T5146]  netlink_sendmsg+0x58b/0x6b0
[   82.368981][ T5146]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.369000][ T5146]  __sock_sendmsg+0x145/0x180
[   82.369028][ T5146]  ____sys_sendmsg+0x31e/0x4e0
[   82.369057][ T5146]  ___sys_sendmsg+0x17b/0x1d0
[   82.369100][ T5146]  __x64_sys_sendmsg+0xd4/0x160
[   82.369130][ T5146]  x64_sys_call+0x191e/0x2ff0
[   82.369150][ T5146]  do_syscall_64+0xd2/0x200
[   82.369174][ T5146]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   82.369266][ T5146]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   82.369342][ T5146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.369365][ T5146] RIP: 0033:0x7fbea81debe9
[   82.369383][ T5146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.369398][ T5146] RSP: 002b:00007fbea6c3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   82.369417][ T5146] RAX: ffffffffffffffda RBX: 00007fbea8405fa0 RCX: 00007fbea81debe9
[   82.369440][ T5146] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003
[   82.369453][ T5146] RBP: 00007fbea6c3f090 R08: 0000000000000000 R09: 0000000000000000
[   82.369466][ T5146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   82.369523][ T5146] R13: 00007fbea8406038 R14: 00007fbea8405fa0 R15: 00007ffea48a80d8
[   82.369544][ T5146]  </TASK>
[   82.370762][ T5144] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   82.407783][ T5148] 9pnet_fd: Insufficient options for proto=fd
[   82.463318][ T5144] EXT4-fs (loop3): 1 truncate cleaned up
[   82.744325][ T5158] loop3: detected capacity change from 0 to 512
[   82.770675][ T5158] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   82.789632][ T5158] EXT4-fs (loop3): 1 truncate cleaned up
[   82.984094][ T5167] loop4: detected capacity change from 0 to 128
[   83.037151][ T5158] SELinux: failed to load policy
[   83.059064][   T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.069524][   T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 53105 - 0
[   83.079912][   T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 34561 - 0
[   83.519340][ T5154] Set syz1 is full, maxelem 65536 reached
[   83.538504][   T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.548907][   T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 53105 - 0
[   83.559284][   T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 34561 - 0
[   83.682491][   T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.693047][   T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 53105 - 0
[   83.703474][   T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 34561 - 0
[   83.859726][   T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.870140][   T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 53105 - 0
[   83.880555][   T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 34561 - 0
[   83.942200][ T5191] loop3: detected capacity change from 0 to 8192
[   83.982741][ T5195] loop9: detected capacity change from 0 to 7
[   83.989300][ T5195]  loop9: unable to read partition table
[   83.995198][ T5195] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   83.995198][ T5195] 
) failed (rc=-5)
[   84.205711][ T5168] chnl_net:caif_netlink_parms(): no params data found
[   84.351136][   T41] bridge_slave_1: left allmulticast mode
[   84.356956][   T41] bridge_slave_1: left promiscuous mode
[   84.362853][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.413457][   T41] bridge_slave_0: left allmulticast mode
[   84.419166][   T41] bridge_slave_0: left promiscuous mode
[   84.425195][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.715402][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.733204][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.753609][   T41] bond0 (unregistering): Released all slaves
[   84.797172][ T5209] loop3: detected capacity change from 0 to 512
[   84.823636][   T41] hsr_slave_0: left promiscuous mode
[   84.829441][   T41] hsr_slave_1: left promiscuous mode
[   84.838779][ T5209] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.857623][   T41] veth1_macvtap: left promiscuous mode
[   84.868487][ T5216] netlink: 'syz.2.517': attribute type 10 has an invalid length.
[   84.887179][   T41] veth0_macvtap: left promiscuous mode
[   84.909042][   T41] veth1_vlan: left promiscuous mode
[   84.914562][   T41] veth0_vlan: left promiscuous mode
[   84.997508][ T5224] SELinux: security_context_str_to_sid () failed with errno=-22
[   85.075267][   T41] team0 (unregistering): Port device team_slave_1 removed
[   85.098729][   T41] team0 (unregistering): Port device team_slave_0 removed
[   85.135034][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.142170][ T5168] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.150424][ T5168] bridge_slave_0: entered allmulticast mode
[   85.158028][ T5168] bridge_slave_0: entered promiscuous mode
[   85.164824][ T5216] team0: Device hsr_slave_0 failed to register rx_handler
[   85.178261][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.185441][ T5168] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.210731][ T5168] bridge_slave_1: entered allmulticast mode
[   85.222303][ T5168] bridge_slave_1: entered promiscuous mode
[   85.256028][ T5168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.283893][ T5168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.352116][ T5168] team0: Port device team_slave_0 added
[   85.363865][ T5168] team0: Port device team_slave_1 added
[   85.372152][ T5257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.522'.
[   85.435364][ T5168] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.442484][ T5168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.468688][ T5168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.513203][ T5168] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.520372][ T5168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.546459][ T5168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.581082][ T5168] hsr_slave_0: entered promiscuous mode
[   85.587357][ T5168] hsr_slave_1: entered promiscuous mode
[   85.599701][ T5168] debugfs: 'hsr0' already exists in 'hsr'
[   85.605548][ T5168] Cannot create hsr debugfs directory
[   85.640030][ T5254] loop4: detected capacity change from 0 to 8192
[   85.661657][ T5270] netlink: 104 bytes leftover after parsing attributes in process `syz.2.523'.
[   85.831540][ T5168] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   85.843951][ T5278] loop0: detected capacity change from 0 to 512
[   85.844408][ T5168] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   85.865638][ T5168] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   85.878797][ T5278] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   85.894351][ T5278] EXT4-fs (loop0): 1 truncate cleaned up
[   85.900406][ T5168] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   85.972358][   T29] kauditd_printk_skb: 190 callbacks suppressed
[   85.972374][   T29] audit: type=1400 audit(1756174998.673:3099): avc:  denied  { create } for  pid=5289 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   86.089386][ T5307] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   86.124935][   T29] audit: type=1326 audit(1756174998.803:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5281 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   86.133861][ T5168] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.148423][   T29] audit: type=1326 audit(1756174998.803:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5281 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   86.188517][ T5310] loop4: detected capacity change from 0 to 512
[   86.220385][ T5310] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   86.276253][ T5168] 8021q: adding VLAN 0 to HW filter on device team0
[   86.276618][ T5316] loop3: detected capacity change from 0 to 128
[   86.289922][ T5310] EXT4-fs (loop4): 1 truncate cleaned up
[   86.292907][   T29] audit: type=1400 audit(1756174998.943:3102): avc:  denied  { write } for  pid=5305 comm="syz.3.530" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   86.544558][   T29] audit: type=1400 audit(1756174999.243:3103): avc:  denied  { watch } for  pid=5322 comm="syz.0.534" path="/113/file0" dev="tmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[   86.552991][ T1377] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.568873][   T29] audit: type=1400 audit(1756174999.243:3104): avc:  denied  { connect } for  pid=5322 comm="syz.0.534" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   86.575133][ T1377] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.603536][   T29] audit: type=1400 audit(1756174999.243:3105): avc:  denied  { write } for  pid=5322 comm="syz.0.534" path="socket:[10390]" dev="sockfs" ino=10390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   86.608788][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.634354][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.642502][ T5325] IPv6: addrconf: prefix option has invalid lifetime
[   86.653788][   T29] audit: type=1400 audit(1756174999.353:3106): avc:  denied  { name_bind } for  pid=5324 comm="syz.0.535" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   86.682719][ T5325] netlink: 'syz.0.535': attribute type 1 has an invalid length.
[   86.688911][ T5168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   86.690402][ T5325] netlink: 224 bytes leftover after parsing attributes in process `syz.0.535'.
[   86.700767][ T5168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.813159][   T29] audit: type=1400 audit(1756174999.473:3107): avc:  denied  { setopt } for  pid=5324 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   86.908788][ T5168] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.915823][   T29] audit: type=1400 audit(1756174999.603:3108): avc:  denied  { create } for  pid=5331 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   86.984696][ T5337] loop4: detected capacity change from 0 to 512
[   87.199663][ T5337] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.399721][ T5283] Set syz1 is full, maxelem 65536 reached
[   87.516635][ T5168] veth0_vlan: entered promiscuous mode
[   87.527172][ T5168] veth1_vlan: entered promiscuous mode
[   87.589664][ T5168] veth0_macvtap: entered promiscuous mode
[   87.604452][ T5168] veth1_macvtap: entered promiscuous mode
[   87.640524][ T5168] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.669682][ T5168] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.705600][ T3661] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.729426][ T5373] random: crng reseeded on system resumption
[   87.780171][ T3661] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.837108][ T3661] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.889178][ T3661] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.936050][ T5386] loop5: detected capacity change from 0 to 512
[   88.056278][ T5386] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.070862][ T5379] SELinux: failed to load policy
[   88.166136][ T5395] loop9: detected capacity change from 0 to 7
[   88.198250][ T5395] buffer_io_error: 10 callbacks suppressed
[   88.198265][ T5395] Buffer I/O error on dev loop9, logical block 0, async page read
[   88.342179][ T5395] Buffer I/O error on dev loop9, logical block 0, async page read
[   88.350150][ T5395]  loop9: unable to read partition table
[   88.413049][ T5404] netlink: 56 bytes leftover after parsing attributes in process `syz.4.545'.
[   88.431347][ T5404] netlink: 'syz.4.545': attribute type 11 has an invalid length.
[   88.444137][ T5395] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   88.444137][ T5395] 
) failed (rc=-5)
[   88.445675][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   88.483313][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   88.491528][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   88.499735][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   88.507897][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   88.546491][ T5410] Zero length message leads to an empty skb
[   88.612544][ T5414] loop4: detected capacity change from 0 to 512
[   88.766546][ T5416] loop2: detected capacity change from 0 to 512
[   88.803174][ T5416] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   88.828631][ T5414] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   88.854010][ T5416] EXT4-fs (loop2): 1 truncate cleaned up
[   88.860476][ T5414] EXT4-fs (loop4): 1 truncate cleaned up
[   89.182994][ T5436] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   89.369021][ T5443] loop5: detected capacity change from 0 to 512
[   89.410558][ T5441] loop2: detected capacity change from 0 to 8192
[   89.422242][ T5443] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   89.466729][ T5443] EXT4-fs (loop5): 1 truncate cleaned up
[   89.510497][ T5443] EXT4-fs error (device loop5): ext4_ext_precache:632: inode #15: comm syz.5.558: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964)
[   89.671292][ T5447] 9pnet_fd: Insufficient options for proto=fd
[   89.704630][ T5443] SELinux: failed to load policy
[   89.885995][ T5452] loop2: detected capacity change from 0 to 8192
[   90.249518][ T5464] random: crng reseeded on system resumption
[   90.313768][ T5468] loop2: detected capacity change from 0 to 512
[   90.347533][ T5468] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   90.393939][ T5468] EXT4-fs (loop2): 1 truncate cleaned up
[   90.539128][ T5474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.567'.
[   90.556934][ T5477] loop4: detected capacity change from 0 to 512
[   90.574003][ T5474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.567'.
[   90.641061][ T5477] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   90.689343][ T5477] EXT4-fs (loop4): orphan cleanup on readonly fs
[   90.727743][ T5477] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.568: corrupted inode contents
[   90.795366][ T5477] EXT4-fs (loop4): Remounting filesystem read-only
[   90.812384][ T5477] EXT4-fs (loop4): 1 truncate cleaned up
[   90.818330][ T3429] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   90.828895][ T3429] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   90.860069][ T3429] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[   90.932908][ T5494] loop4: detected capacity change from 0 to 512
[   90.940536][ T5494] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   90.957282][ T5492] loop3: detected capacity change from 0 to 512
[   90.991794][ T5492] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   91.020720][ T5494] EXT4-fs (loop4): 1 truncate cleaned up
[   91.030642][ T5492] EXT4-fs (loop3): 1 truncate cleaned up
[   91.382127][   T29] kauditd_printk_skb: 116 callbacks suppressed
[   91.382153][   T29] audit: type=1400 audit(1756175004.083:3219): avc:  denied  { unmount } for  pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   91.431903][ T5505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.576'.
[   91.440928][   T29] audit: type=1326 audit(1756175004.123:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5504 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   91.464957][   T29] audit: type=1326 audit(1756175004.123:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5504 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   91.488394][   T29] audit: type=1326 audit(1756175004.123:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5504 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   91.511880][   T29] audit: type=1326 audit(1756175004.123:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5504 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   91.535517][   T29] audit: type=1326 audit(1756175004.123:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5504 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   91.538190][ T5459] loop5: detected capacity change from 0 to 8192
[   91.559386][   T29] audit: type=1326 audit(1756175004.123:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5504 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   91.589177][   T29] audit: type=1326 audit(1756175004.123:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5504 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   91.612716][   T29] audit: type=1326 audit(1756175004.123:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5504 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   91.636090][   T29] audit: type=1326 audit(1756175004.123:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5504 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[   91.713629][ T5515] loop2: detected capacity change from 0 to 512
[   91.725919][ T5511] netlink: 'syz.0.578': attribute type 10 has an invalid length.
[   91.734270][ T5511] team0: Device hsr_slave_0 failed to register rx_handler
[   91.770319][ T5515] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   91.782778][ T5518] netlink: 260 bytes leftover after parsing attributes in process `syz.4.580'.
[   91.791884][ T5518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'.
[   91.865997][ T5515] EXT4-fs (loop2): 1 truncate cleaned up
[   91.936810][ T5535] loop3: detected capacity change from 0 to 512
[   92.209266][ T5543] random: crng reseeded on system resumption
[   93.010923][ T5550] random: crng reseeded on system resumption
[   93.055886][ T5530] Set syz1 is full, maxelem 65536 reached
[   93.605014][ T5560] 9pnet_fd: Insufficient options for proto=fd
[   93.619174][ T5560] process 'syz.2.591' launched '/dev/fd/13' with NULL argv: empty string added
[   93.653710][ T5561] loop9: detected capacity change from 0 to 7
[   93.673148][ T5561] Buffer I/O error on dev loop9, logical block 0, async page read
[   93.681060][ T5561] Buffer I/O error on dev loop9, logical block 0, async page read
[   93.689194][ T5561]  loop9: unable to read partition table
[   93.782003][ T5561] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   93.782003][ T5561] 
) failed (rc=-5)
[   93.803140][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   93.811290][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   93.824411][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   93.985428][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   94.041756][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[   94.069354][ T5533] Set syz1 is full, maxelem 65536 reached
[   94.214445][ T5569] usb usb5: usbfs: process 5569 (syz.4.594) did not claim interface 0 before use
[   94.378561][ T5576] SELinux:  policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c
[   94.391960][ T5576] SELinux: failed to load policy
[   94.449809][ T5584] loop3: detected capacity change from 0 to 512
[   94.486270][ T5584] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   94.508811][ T5585] netlink: 'syz.4.598': attribute type 10 has an invalid length.
[   94.517172][ T5585] team0: Device hsr_slave_0 failed to register rx_handler
[   94.544607][ T5584] EXT4-fs (loop3): 1 truncate cleaned up
[   94.843702][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.601'.
[   94.866060][ T5563] loop2: detected capacity change from 0 to 8192
[   95.103224][ T5603] loop5: detected capacity change from 0 to 512
[   95.156468][ T5603] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.642775][ T5623] random: crng reseeded on system resumption
[   95.735671][ T5625] random: crng reseeded on system resumption
[   95.882124][ T5632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.615'.
[   95.983320][ T5637] bond1: entered promiscuous mode
[   95.988505][ T5637] bond1: entered allmulticast mode
[   95.994298][ T5637] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.005711][ T5637] bond1 (unregistering): Released all slaves
[   96.012707][ T5168] EXT4-fs unmount: 52 callbacks suppressed
[   96.012744][ T5168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   96.035761][ T3389] Process accounting resumed
[   96.105739][ T5647] loop5: detected capacity change from 0 to 1024
[   96.151648][ T5647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.184516][ T5647] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.212089][ T5647] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.620: lblock 3 mapped to illegal pblock 3 (length 13)
[   96.249303][ T5647] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[   96.261884][ T5647] EXT4-fs (loop5): This should not happen!! Data will be lost
[   96.261884][ T5647] 
[   96.283795][ T5663] loop2: detected capacity change from 0 to 128
[   96.392755][ T5669] loop2: detected capacity change from 0 to 512
[   96.399174][ T5667] loop3: detected capacity change from 0 to 512
[   96.428410][ T5669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   96.462091][ T5667] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   96.482564][ T5669] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.568759][   T29] kauditd_printk_skb: 281 callbacks suppressed
[   96.568832][   T29] audit: type=1326 audit(1756175009.253:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b46ebe9 code=0x7ffc0000
[   96.599919][ T5667] EXT4-fs (loop3): 1 truncate cleaned up
[   96.602462][   T29] audit: type=1326 audit(1756175009.293:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b46ebe9 code=0x7ffc0000
[   96.629926][ T5667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.679942][ T5660] loop4: detected capacity change from 0 to 8192
[   96.758640][   T29] audit: type=1326 audit(1756175009.453:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[   96.824566][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   96.853241][   T29] audit: type=1326 audit(1756175009.513:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f6b46ebe9 code=0x7ffc0000
[   96.876766][   T29] audit: type=1326 audit(1756175009.543:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b46ebe9 code=0x7ffc0000
[   96.947262][ T5682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.627'.
[   97.014994][   T41] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   97.042328][   T29] audit: type=1326 audit(1756175009.623:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[   97.065854][   T29] audit: type=1326 audit(1756175009.643:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[   97.065885][   T41] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 36 with max blocks 2048 with error 28
[   97.065913][   T41] EXT4-fs (loop5): This should not happen!! Data will be lost
[   97.065913][   T41] 
[   97.065927][   T41] EXT4-fs (loop5): Total free blocks count 0
[   97.065941][   T41] EXT4-fs (loop5): Free/Dirty block details
[   97.089334][   T29] audit: type=1326 audit(1756175009.643:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[   97.101868][   T41] EXT4-fs (loop5): free_blocks=4293918720
[   97.101884][   T41] EXT4-fs (loop5): dirty_blocks=15872
[   97.111765][   T29] audit: type=1326 audit(1756175009.643:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[   97.117843][   T41] EXT4-fs (loop5): Block reservation details
[   97.188785][   T29] audit: type=1326 audit(1756175009.643:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[   97.224312][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.317852][ T5699] netlink: 'syz.4.634': attribute type 10 has an invalid length.
[   97.333607][ T5699] team0: Device hsr_slave_0 failed to register rx_handler
[   97.399918][ T5704] loop3: detected capacity change from 0 to 512
[   97.416815][ T5704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   97.445962][ T5704] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.470392][ T5710] can0: slcan on ptm0.
[   97.528063][ T5716] loop0: detected capacity change from 0 to 512
[   97.542046][ T5709] can0 (unregistered): slcan off ptm0.
[   97.573397][ T5716] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   97.607098][ T5727] FAULT_INJECTION: forcing a failure.
[   97.607098][ T5727] name failslab, interval 1, probability 0, space 0, times 0
[   97.619897][ T5727] CPU: 1 UID: 0 PID: 5727 Comm: syz.2.639 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   97.619927][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   97.619941][ T5727] Call Trace:
[   97.619948][ T5727]  <TASK>
[   97.620004][ T5727]  __dump_stack+0x1d/0x30
[   97.620107][ T5727]  dump_stack_lvl+0xe8/0x140
[   97.620127][ T5727]  dump_stack+0x15/0x1b
[   97.620145][ T5727]  should_fail_ex+0x265/0x280
[   97.620167][ T5727]  ? io_manage_buffers_legacy+0x188/0x6c0
[   97.620197][ T5727]  should_failslab+0x8c/0xb0
[   97.620283][ T5727]  __kmalloc_cache_noprof+0x4c/0x320
[   97.620314][ T5727]  io_manage_buffers_legacy+0x188/0x6c0
[   97.620346][ T5727]  __io_issue_sqe+0xfe/0x2e0
[   97.620423][ T5727]  ? io_assign_file+0x56/0x200
[   97.620444][ T5727]  io_issue_sqe+0x53/0x970
[   97.620464][ T5727]  ? io_provide_buffers_prep+0x1c7/0x1f0
[   97.620554][ T5727]  io_submit_sqes+0x675/0x1060
[   97.620584][ T5727]  __se_sys_io_uring_enter+0x1c1/0x1b70
[   97.620660][ T5727]  ? 0xffffffff81000000
[   97.620674][ T5727]  ? __rcu_read_unlock+0x4f/0x70
[   97.620696][ T5727]  ? get_pid_task+0x96/0xd0
[   97.620717][ T5727]  ? proc_fail_nth_write+0x13b/0x160
[   97.620745][ T5727]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   97.620822][ T5727]  ? vfs_write+0x7e8/0x960
[   97.620844][ T5727]  ? __rcu_read_unlock+0x4f/0x70
[   97.620865][ T5727]  ? __fget_files+0x184/0x1c0
[   97.620948][ T5727]  ? fput+0x8f/0xc0
[   97.620979][ T5727]  __x64_sys_io_uring_enter+0x78/0x90
[   97.621002][ T5727]  x64_sys_call+0x2de1/0x2ff0
[   97.621099][ T5727]  do_syscall_64+0xd2/0x200
[   97.621126][ T5727]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   97.621151][ T5727]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   97.621178][ T5727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.621277][ T5727] RIP: 0033:0x7fbea81debe9
[   97.621294][ T5727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.621313][ T5727] RSP: 002b:00007fbea6c3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[   97.621337][ T5727] RAX: ffffffffffffffda RBX: 00007fbea8405fa0 RCX: 00007fbea81debe9
[   97.621351][ T5727] RDX: 0000000000000000 RSI: 00000000000047fa RDI: 0000000000000003
[   97.621364][ T5727] RBP: 00007fbea6c3f090 R08: 0000000000000000 R09: 0000000000000000
[   97.621434][ T5727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   97.621447][ T5727] R13: 00007fbea8406038 R14: 00007fbea8405fa0 R15: 00007ffea48a80d8
[   97.621465][ T5727]  </TASK>
[   97.882691][ T5716] EXT4-fs (loop0): 1 truncate cleaned up
[   97.893197][ T5716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.906844][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   98.117822][ T5729] loop5: detected capacity change from 0 to 8192
[   98.153963][ T5743] FAULT_INJECTION: forcing a failure.
[   98.153963][ T5743] name failslab, interval 1, probability 0, space 0, times 0
[   98.166675][ T5743] CPU: 1 UID: 0 PID: 5743 Comm: syz.3.640 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   98.166705][ T5743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   98.166719][ T5743] Call Trace:
[   98.166725][ T5743]  <TASK>
[   98.166733][ T5743]  __dump_stack+0x1d/0x30
[   98.166753][ T5743]  dump_stack_lvl+0xe8/0x140
[   98.166769][ T5743]  dump_stack+0x15/0x1b
[   98.166784][ T5743]  should_fail_ex+0x265/0x280
[   98.166805][ T5743]  should_failslab+0x8c/0xb0
[   98.166832][ T5743]  kmem_cache_alloc_bulk_noprof+0x5b/0x410
[   98.166860][ T5743]  ? should_failslab+0x8c/0xb0
[   98.166880][ T5743]  ? kmem_cache_alloc_noprof+0x186/0x310
[   98.166902][ T5743]  ? mas_alloc_nodes+0x265/0x520
[   98.166932][ T5743]  mas_alloc_nodes+0x333/0x520
[   98.166969][ T5743]  mas_preallocate+0x33e/0x520
[   98.166997][ T5743]  mmap_region+0xbdd/0x1630
[   98.167045][ T5743]  do_mmap+0x9b3/0xbe0
[   98.167082][ T5743]  vm_mmap_pgoff+0x17a/0x2e0
[   98.167118][ T5743]  ksys_mmap_pgoff+0xc2/0x310
[   98.167151][ T5743]  ? __x64_sys_mmap+0x49/0x70
[   98.167173][ T5743]  x64_sys_call+0x14a3/0x2ff0
[   98.167191][ T5743]  do_syscall_64+0xd2/0x200
[   98.167218][ T5743]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   98.167244][ T5743]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   98.167272][ T5743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.167293][ T5743] RIP: 0033:0x7f3f3abbec23
[   98.167307][ T5743] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[   98.167324][ T5743] RSP: 002b:00007f3f395dce18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   98.167347][ T5743] RAX: ffffffffffffffda RBX: 000000000000050d RCX: 00007f3f3abbec23
[   98.167361][ T5743] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[   98.167374][ T5743] RBP: 0000200000000142 R08: 00000000ffffffff R09: 0000000000000000
[   98.167385][ T5743] R10: 0000000000000022 R11: 0000000000000246 R12: 000000000000000a
[   98.167397][ T5743] R13: 00007f3f395dcef0 R14: 00007f3f395dceb0 R15: 00002000000000c0
[   98.167418][ T5743]  </TASK>
[   98.425646][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.653990][ T5748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.643'.
[   98.929673][ T5762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'.
[   98.959616][ T5762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.647'.
[   99.061299][ T5774] loop2: detected capacity change from 0 to 8192
[   99.061541][ T5779] loop0: detected capacity change from 0 to 512
[   99.078504][ T5762] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   99.108389][ T5779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   99.137539][ T5779] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.479757][ T5821] loop3: detected capacity change from 0 to 512
[   99.537107][ T5821] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   99.580998][ T5821] EXT4-fs (loop3): 1 truncate cleaned up
[   99.632943][ T5821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.712810][ T5844] loop4: detected capacity change from 0 to 512
[   99.777206][ T5851] FAULT_INJECTION: forcing a failure.
[   99.777206][ T5851] name failslab, interval 1, probability 0, space 0, times 0
[   99.777422][ T5844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   99.790071][ T5851] CPU: 0 UID: 0 PID: 5851 Comm: syz.2.657 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   99.790099][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   99.790111][ T5851] Call Trace:
[   99.790118][ T5851]  <TASK>
[   99.790127][ T5851]  __dump_stack+0x1d/0x30
[   99.790159][ T5851]  dump_stack_lvl+0xe8/0x140
[   99.790186][ T5851]  dump_stack+0x15/0x1b
[   99.790266][ T5851]  should_fail_ex+0x265/0x280
[   99.790287][ T5851]  should_failslab+0x8c/0xb0
[   99.790311][ T5851]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[   99.790409][ T5851]  ? sidtab_sid2str_get+0xa0/0x130
[   99.790444][ T5851]  kmemdup_noprof+0x2b/0x70
[   99.790468][ T5851]  sidtab_sid2str_get+0xa0/0x130
[   99.790555][ T5851]  security_sid_to_context_core+0x1eb/0x2e0
[   99.790577][ T5851]  security_sid_to_context+0x27/0x40
[   99.790596][ T5851]  selinux_lsmprop_to_secctx+0x67/0xf0
[   99.790617][ T5851]  security_lsmprop_to_secctx+0x43/0x80
[   99.790683][ T5851]  audit_log_task_context+0x77/0x190
[   99.790714][ T5851]  audit_log_task+0xf4/0x250
[   99.790819][ T5851]  audit_seccomp+0x61/0x100
[   99.790842][ T5851]  ? __seccomp_filter+0x68c/0x10d0
[   99.790863][ T5851]  __seccomp_filter+0x69d/0x10d0
[   99.790885][ T5851]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   99.790962][ T5851]  ? vfs_write+0x7e8/0x960
[   99.791008][ T5851]  ? __rcu_read_unlock+0x4f/0x70
[   99.791029][ T5851]  ? __fget_files+0x184/0x1c0
[   99.791055][ T5851]  __secure_computing+0x82/0x150
[   99.791075][ T5851]  syscall_trace_enter+0xcf/0x1e0
[   99.791114][ T5851]  do_syscall_64+0xac/0x200
[   99.791140][ T5851]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   99.791217][ T5851]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   99.791241][ T5851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.791262][ T5851] RIP: 0033:0x7fbea81debe9
[   99.791278][ T5851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.791371][ T5851] RSP: 002b:00007fbea6c3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   99.791391][ T5851] RAX: ffffffffffffffda RBX: 00007fbea8405fa0 RCX: 00007fbea81debe9
[   99.791404][ T5851] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003
[   99.791417][ T5851] RBP: 00007fbea6c3f090 R08: 0000000000000000 R09: 0000000000000000
[   99.791429][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.791440][ T5851] R13: 00007fbea8406038 R14: 00007fbea8405fa0 R15: 00007ffea48a80d8
[   99.791460][ T5851]  </TASK>
[   99.791720][ T5851] netlink: 52 bytes leftover after parsing attributes in process `syz.2.657'.
[   99.996576][ T5844] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.076738][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.098087][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  100.190770][ T5861] netlink: 'syz.2.659': attribute type 10 has an invalid length.
[  100.203613][ T5861] team0: Device hsr_slave_0 failed to register rx_handler
[  100.229809][ T5874] loop5: detected capacity change from 0 to 512
[  100.321386][ T5880] loop5: detected capacity change from 0 to 512
[  100.330488][ T5880] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  100.363448][ T5878] random: crng reseeded on system resumption
[  100.370257][ T5880] EXT4-fs (loop5): 1 truncate cleaned up
[  100.376963][ T5880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.415127][ T5883] loop9: detected capacity change from 0 to 7
[  100.446836][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.455345][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.459841][ T5880] EXT4-fs error (device loop5): ext4_ext_precache:632: inode #15: comm syz.5.663: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964)
[  100.463245][ T3833]  loop9: unable to read partition table
[  100.487809][ T5883] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.545973][ T5883] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.554068][ T5883]  loop9: unable to read partition table
[  100.600418][ T5883] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  100.600418][ T5883] 
) failed (rc=-5)
[  100.616708][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.662295][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.672118][ T5880] SELinux: failed to load policy
[  100.694575][ T5168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.701074][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.712799][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  100.731495][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.754733][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[  101.096253][ T5896] loop2: detected capacity change from 0 to 128
[  101.142940][ T5896] vfat: Unknown parameter '0xffffffffffffffff000000000000000000000x0000000000000000'
[  101.229792][ T5898] loop4: detected capacity change from 0 to 512
[  101.280475][ T5898] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  101.463811][ T5896] netlink: 20 bytes leftover after parsing attributes in process `syz.2.668'.
[  101.491978][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'.
[  101.531743][ T5898] EXT4-fs (loop4): 1 truncate cleaned up
[  101.538471][ T5898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.717679][ T5891] Set syz1 is full, maxelem 65536 reached
[  101.819521][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.850138][ T5904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.670'.
[  101.900769][ T5904] veth0: entered promiscuous mode
[  101.913635][   T29] kauditd_printk_skb: 137 callbacks suppressed
[  101.913651][   T29] audit: type=1400 audit(1756175014.613:3656): avc:  denied  { bind } for  pid=5903 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  101.942442][ T5904] random: crng reseeded on system resumption
[  101.951197][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'.
[  101.962039][   T29] audit: type=1400 audit(1756175014.643:3657): avc:  denied  { append } for  pid=5903 comm="syz.2.670" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  102.010558][ T5906] netlink: 'syz.4.671': attribute type 10 has an invalid length.
[  102.027476][ T5906] team0: Device hsr_slave_0 failed to register rx_handler
[  102.082886][ T5915] loop4: detected capacity change from 0 to 128
[  102.149246][ T5918] loop2: detected capacity change from 0 to 512
[  102.346258][ T5922] SELinux: failed to load policy
[  102.391751][   T29] audit: type=1326 audit(1756175015.073:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[  102.415239][   T29] audit: type=1326 audit(1756175015.073:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[  102.521203][ T5930] loop5: detected capacity change from 0 to 8192
[  102.702666][   T29] audit: type=1326 audit(1756175015.403:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3abbebe9 code=0x7ffc0000
[  102.777678][   T29] audit: type=1326 audit(1756175015.433:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f3f3abbebe9 code=0x7ffc0000
[  102.801135][   T29] audit: type=1326 audit(1756175015.433:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3abbebe9 code=0x7ffc0000
[  102.824550][   T29] audit: type=1326 audit(1756175015.433:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3abbebe9 code=0x7ffc0000
[  102.848087][   T29] audit: type=1400 audit(1756175015.523:3664): avc:  denied  { read } for  pid=5933 comm="syz.3.681" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  102.871202][   T29] audit: type=1400 audit(1756175015.523:3665): avc:  denied  { open } for  pid=5933 comm="syz.3.681" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  103.043580][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.682'.
[  103.170053][ T5943] netlink: 'syz.4.683': attribute type 10 has an invalid length.
[  103.188747][ T5943] team0: Device hsr_slave_0 failed to register rx_handler
[  103.213198][ T5920] Set syz1 is full, maxelem 65536 reached
[  103.476915][ T5947] loop5: detected capacity change from 0 to 512
[  103.657739][ T5953] loop5: detected capacity change from 0 to 512
[  103.693388][ T5925] loop0: detected capacity change from 0 to 8192
[  103.707824][ T5953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  103.754369][ T5953] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.969299][ T5960] loop4: detected capacity change from 0 to 512
[  103.996759][ T5960] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  104.018026][ T5960] EXT4-fs (loop4): 1 truncate cleaned up
[  104.034678][ T5960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.137544][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.158490][ T5966] loop4: detected capacity change from 0 to 512
[  104.198772][ T5966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  104.211634][ T5966] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.284021][ T5970] random: crng reseeded on system resumption
[  104.364266][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'.
[  104.376019][ T5978] loop3: detected capacity change from 0 to 512
[  104.411111][ T5978] EXT4-fs error (device loop3): ext4_init_orphan_info:585: comm syz.3.693: inode #0: comm syz.3.693: iget: illegal inode #
[  104.427456][ T5981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'.
[  104.441365][ T5978] EXT4-fs (loop3): get orphan inode failed
[  104.457828][ T5978] EXT4-fs (loop3): mount failed
[  104.530041][ T5168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  104.562617][ T5985] loop3: detected capacity change from 0 to 512
[  104.580759][ T5988] loop5: detected capacity change from 0 to 512
[  104.602975][ T5989] 9pnet: p9_errstr2errno: server reported unknown error 
[  104.625359][ T5988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  104.648446][ T5988] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.721956][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'.
[  104.853852][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'.
[  104.863765][ T5994] loop0: detected capacity change from 0 to 8192
[  105.041602][ T6003] loop9: detected capacity change from 0 to 7
[  105.047949][ T6003] Buffer I/O error on dev loop9, logical block 0, async page read
[  105.055861][ T6003]  loop9: unable to read partition table
[  105.061714][ T6003] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  105.061714][ T6003] 
) failed (rc=-5)
[  105.108771][ T6002] syzkaller0: entered allmulticast mode
[  105.158154][ T6002] syzkaller0 (unregistering): left allmulticast mode
[  105.389763][ T6007] loop2: detected capacity change from 0 to 512
[  105.400882][ T6007] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  105.413908][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  105.425010][ T6007] EXT4-fs (loop2): 1 truncate cleaned up
[  105.432828][ T6007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.535437][ T6012] vlan0: entered allmulticast mode
[  105.562199][ T5168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  105.616371][ T6020] loop5: detected capacity change from 0 to 512
[  105.657362][ T6020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  105.661318][ T6007] SELinux: failed to load policy
[  105.672422][ T6024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.711'.
[  105.675438][ T6020] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.728209][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.746956][ T6028] loop3: detected capacity change from 0 to 128
[  105.759903][ T6028] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  105.774362][ T6028] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.815053][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  105.870271][ T6040] loop3: detected capacity change from 0 to 512
[  105.888195][ T6040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  105.907229][ T6040] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.922750][ T6046] netlink: 'syz.4.716': attribute type 10 has an invalid length.
[  105.942298][ T6046] team0: Device hsr_slave_0 failed to register rx_handler
[  106.048651][ T6052] loop0: detected capacity change from 0 to 512
[  106.080571][ T6052] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  106.104934][ T6052] EXT4-fs (loop0): 1 truncate cleaned up
[  106.116214][ T6052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.208818][ T6057] loop9: detected capacity change from 0 to 7
[  106.215170][ T6057] buffer_io_error: 6 callbacks suppressed
[  106.215184][ T6057] Buffer I/O error on dev loop9, logical block 0, async page read
[  106.228816][ T6057] Buffer I/O error on dev loop9, logical block 0, async page read
[  106.236650][ T6057]  loop9: unable to read partition table
[  106.242340][ T6057] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  106.242340][ T6057] 
) failed (rc=-5)
[  106.313204][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[  106.335665][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[  106.352936][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[  106.370552][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[  106.379524][ T3833] Buffer I/O error on dev loop9, logical block 0, async page read
[  106.417543][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.544049][ T5168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  106.671162][ T6064] loop4: detected capacity change from 0 to 512
[  106.685193][ T6064] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  106.704136][ T6064] EXT4-fs (loop4): 1 truncate cleaned up
[  106.719904][ T6064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.784308][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  106.896205][ T6074] netlink: 256 bytes leftover after parsing attributes in process `syz.2.727'.
[  106.949830][ T6074] geneve2: entered promiscuous mode
[  106.955225][ T6074] geneve2: entered allmulticast mode
[  106.977532][ T6079] loop0: detected capacity change from 0 to 512
[  106.992594][ T1796] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 36095 - 0
[  107.001510][ T1796] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 36586 - 0
[  107.014062][ T6075] SELinux: failed to load policy
[  107.030214][ T6079] journal_path: Non-blockdev passed as './bus'
[  107.036693][ T6079] EXT4-fs: error: could not find journal device path
[  107.037750][ T6083] veth0: entered promiscuous mode
[  107.059603][ T1796] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 36095 - 0
[  107.068563][ T1796] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 36586 - 0
[  107.100333][ T3661] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 36095 - 0
[  107.109217][ T3661] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 36586 - 0
[  107.126732][ T6085] loop2: detected capacity change from 0 to 512
[  107.126700][ T3661] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 36095 - 0
[  107.141907][ T3661] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 36586 - 0
[  107.156001][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'.
[  107.180525][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.202704][ T6089] ref_ctr_offset mismatch. inode: 0x317 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000
[  107.203083][ T6085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  107.247112][ T6085] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.284169][ T6095] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6095 comm=syz.4.732
[  107.297061][ T6095] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6095 comm=syz.4.732
[  107.315140][ T6094] loop3: detected capacity change from 0 to 512
[  107.366817][ T6094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  107.380540][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  107.391395][   T29] kauditd_printk_skb: 247 callbacks suppressed
[  107.391410][   T29] audit: type=1400 audit(1756175020.093:3913): avc:  denied  { audit_write } for  pid=6093 comm="syz.4.732" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  107.393164][ T6094] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.447588][ T6105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.447990][   T29] audit: type=1400 audit(1756175020.143:3914): avc:  denied  { ioctl } for  pid=6093 comm="syz.4.732" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  107.495442][ T6062] loop5: detected capacity change from 0 to 8192
[  107.519443][ T6105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.570919][ T6107] netlink: 48 bytes leftover after parsing attributes in process `syz.0.736'.
[  107.684380][ T6114] netlink: 'syz.0.737': attribute type 10 has an invalid length.
[  107.692479][ T6114] team0: Device hsr_slave_0 failed to register rx_handler
[  107.813441][ T6121] FAULT_INJECTION: forcing a failure.
[  107.813441][ T6121] name failslab, interval 1, probability 0, space 0, times 0
[  107.826230][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: syz.2.739 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  107.826314][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  107.826327][ T6121] Call Trace:
[  107.826334][ T6121]  <TASK>
[  107.826343][ T6121]  __dump_stack+0x1d/0x30
[  107.826369][ T6121]  dump_stack_lvl+0xe8/0x140
[  107.826388][ T6121]  dump_stack+0x15/0x1b
[  107.826403][ T6121]  should_fail_ex+0x265/0x280
[  107.826433][ T6121]  should_failslab+0x8c/0xb0
[  107.826461][ T6121]  __kmalloc_noprof+0xa5/0x3e0
[  107.826490][ T6121]  ? pfkey_add+0x85b/0x12e0
[  107.826518][ T6121]  ? timer_init_key+0x73/0x140
[  107.826626][ T6121]  pfkey_add+0x85b/0x12e0
[  107.826655][ T6121]  pfkey_sendmsg+0x715/0x900
[  107.826704][ T6121]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  107.826767][ T6121]  __sock_sendmsg+0x145/0x180
[  107.826792][ T6121]  ____sys_sendmsg+0x31e/0x4e0
[  107.826817][ T6121]  ___sys_sendmsg+0x17b/0x1d0
[  107.826880][ T6121]  __x64_sys_sendmsg+0xd4/0x160
[  107.826912][ T6121]  x64_sys_call+0x191e/0x2ff0
[  107.826991][ T6121]  do_syscall_64+0xd2/0x200
[  107.827024][ T6121]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  107.827128][ T6121]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  107.827159][ T6121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.827183][ T6121] RIP: 0033:0x7fbea81debe9
[  107.827201][ T6121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.827222][ T6121] RSP: 002b:00007fbea6c3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  107.827243][ T6121] RAX: ffffffffffffffda RBX: 00007fbea8405fa0 RCX: 00007fbea81debe9
[  107.827258][ T6121] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003
[  107.827272][ T6121] RBP: 00007fbea6c3f090 R08: 0000000000000000 R09: 0000000000000000
[  107.827287][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.827373][ T6121] R13: 00007fbea8406038 R14: 00007fbea8405fa0 R15: 00007ffea48a80d8
[  107.827394][ T6121]  </TASK>
[  107.828555][ T6119] random: crng reseeded on system resumption
[  108.077526][ T6125] loop4: detected capacity change from 0 to 512
[  108.088380][ T6128] netlink: 'syz.2.741': attribute type 27 has an invalid length.
[  108.096668][ T6128] netlink: 'syz.2.741': attribute type 1 has an invalid length.
[  108.104407][ T6128] bridge0: port 1(bridge_slave_0) entered learning state
[  108.122684][ T6125] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  108.123778][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'.
[  108.153741][ T6125] EXT4-fs (loop4): 1 truncate cleaned up
[  108.172690][ T6130] $H�: renamed from bond0 (while UP)
[  108.182474][ T6125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.186601][ T6130] $H�: entered promiscuous mode
[  108.200090][ T6130] bond_slave_0: entered promiscuous mode
[  108.205985][ T6130] bond_slave_1: entered promiscuous mode
[  108.218971][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  108.375228][ T6125] SELinux: failed to load policy
[  108.402906][ T6143] loop2: detected capacity change from 0 to 2048
[  108.424404][ T6143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.445040][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.455694][ T6143] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.469210][ T6143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.486960][   T29] audit: type=1326 audit(1756175021.183:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[  108.510501][   T29] audit: type=1326 audit(1756175021.183:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[  108.582764][   T29] audit: type=1326 audit(1756175021.183:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[  108.606693][   T29] audit: type=1326 audit(1756175021.183:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[  108.630286][   T29] audit: type=1326 audit(1756175021.183:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[  108.653748][   T29] audit: type=1326 audit(1756175021.183:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[  108.677346][   T29] audit: type=1326 audit(1756175021.183:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[  108.701147][   T29] audit: type=1326 audit(1756175021.183:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8041a3ebe9 code=0x7ffc0000
[  108.704790][ T6155] netlink: 256 bytes leftover after parsing attributes in process `syz.5.750'.
[  108.780058][ T6161] random: crng reseeded on system resumption
[  108.803050][ T6153] geneve2: entered promiscuous mode
[  108.808390][ T6153] geneve2: entered allmulticast mode
[  108.827171][ T6163] loop3: detected capacity change from 0 to 512
[  108.836114][ T3661] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 50766 - 0
[  108.845141][ T3661] netdevsim netdevsim5 netdevsim0: set [1, 2] type 2 family 0 port 44489 - 0
[  108.871948][ T6163] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  108.917457][ T3661] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 50766 - 0
[  108.926358][ T3661] netdevsim netdevsim5 netdevsim1: set [1, 2] type 2 family 0 port 44489 - 0
[  108.947144][ T6165] netlink: 388 bytes leftover after parsing attributes in process `syz.5.753'.
[  108.982238][ T6163] EXT4-fs (loop3): 1 truncate cleaned up
[  108.991295][ T6163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.071637][ T3661] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 50766 - 0
[  109.080750][ T3661] netdevsim netdevsim5 netdevsim2: set [1, 2] type 2 family 0 port 44489 - 0
[  109.105940][ T3661] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 50766 - 0
[  109.114775][ T3661] netdevsim netdevsim5 netdevsim3: set [1, 2] type 2 family 0 port 44489 - 0
[  109.139612][ T6176] loop5: detected capacity change from 0 to 512
[  109.162836][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.199234][ T6176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  109.244630][ T6176] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.263007][ T6178] FAULT_INJECTION: forcing a failure.
[  109.263007][ T6178] name failslab, interval 1, probability 0, space 0, times 0
[  109.275950][ T6178] CPU: 1 UID: 0 PID: 6178 Comm: syz.3.756 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  109.276131][ T6178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  109.276144][ T6178] Call Trace:
[  109.276153][ T6178]  <TASK>
[  109.276162][ T6178]  __dump_stack+0x1d/0x30
[  109.276185][ T6178]  dump_stack_lvl+0xe8/0x140
[  109.276206][ T6178]  dump_stack+0x15/0x1b
[  109.276223][ T6178]  should_fail_ex+0x265/0x280
[  109.276246][ T6178]  should_failslab+0x8c/0xb0
[  109.276306][ T6178]  kmem_cache_alloc_noprof+0x50/0x310
[  109.276401][ T6178]  ? getname_flags+0x80/0x3b0
[  109.276435][ T6178]  getname_flags+0x80/0x3b0
[  109.276471][ T6178]  user_path_at+0x28/0x130
[  109.276502][ T6178]  __se_sys_mount+0x25b/0x2e0
[  109.276548][ T6178]  ? fput+0x8f/0xc0
[  109.276579][ T6178]  __x64_sys_mount+0x67/0x80
[  109.276609][ T6178]  x64_sys_call+0x2b4d/0x2ff0
[  109.276700][ T6178]  do_syscall_64+0xd2/0x200
[  109.276772][ T6178]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  109.276797][ T6178]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  109.276825][ T6178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.276854][ T6178] RIP: 0033:0x7f3f3abbebe9
[  109.276870][ T6178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.276914][ T6178] RSP: 002b:00007f3f3961f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  109.276935][ T6178] RAX: ffffffffffffffda RBX: 00007f3f3ade5fa0 RCX: 00007f3f3abbebe9
[  109.276948][ T6178] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100
[  109.276961][ T6178] RBP: 00007f3f3961f090 R08: 0000200000000300 R09: 0000000000000000
[  109.276975][ T6178] R10: 000000000000009d R11: 0000000000000246 R12: 0000000000000001
[  109.276987][ T6178] R13: 00007f3f3ade6038 R14: 00007f3f3ade5fa0 R15: 00007ffc50027808
[  109.277012][ T6178]  </TASK>
[  109.786925][ T6192] loop3: detected capacity change from 0 to 512
[  109.795256][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811a524e00: rx timeout, send abort
[  109.845360][ T6192] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  109.865891][ T6192] EXT4-fs (loop3): 1 truncate cleaned up
[  109.957505][ T6192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.173115][ T5168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  110.226719][ T6197] loop5: detected capacity change from 0 to 512
[  110.268425][ T6197] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  110.303515][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811a524e00: abort rx timeout. Force session deactivation
[  110.315116][ T6197] EXT4-fs (loop5): 1 truncate cleaned up
[  110.322905][ T6197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.341813][ T6201] SELinux: failed to load policy
[  110.417340][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.633217][ T5168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.716460][ T6211] netlink: 256 bytes leftover after parsing attributes in process `syz.5.764'.
[  110.775193][ T6218] loop3: detected capacity change from 0 to 128
[  110.783937][ T6218] EXT4-fs: Ignoring removed nobh option
[  110.821694][ T6218] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  110.838781][ T6220] loop5: detected capacity change from 0 to 512
[  110.856734][ T6218] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  110.961102][ T6218] ./file0: Can't lookup blockdev
[  110.966705][ T6212] loop0: detected capacity change from 0 to 8192
[  111.019439][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  111.058521][ T6229] netlink: 'syz.4.770': attribute type 10 has an invalid length.
[  111.079613][ T6229] team0: Device hsr_slave_0 failed to register rx_handler
[  111.157978][ T6238] loop5: detected capacity change from 0 to 512
[  111.187348][ T6240] loop0: detected capacity change from 0 to 512
[  111.200101][ T6241] loop4: detected capacity change from 0 to 128
[  111.214495][ T6238] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  111.374085][ T6246] random: crng reseeded on system resumption
[  111.379364][ T6240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  111.393871][ T6238] EXT4-fs (loop5): 1 truncate cleaned up
[  111.400055][ T6238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.414559][ T6244] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000)
[  111.423158][ T6244] FAT-fs (loop4): Filesystem has been set read-only
[  111.430663][ T6244] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000)
[  111.439056][ T6240] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.573616][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.776'.
[  111.610307][ T6259] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[  111.620757][ T6259] SELinux: failed to load policy
[  111.719609][ T5168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.729040][ T6263] loop2: detected capacity change from 0 to 512
[  111.745390][ T6263] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  111.747167][ T6241] syz.4.774: attempt to access beyond end of device
[  111.747167][ T6241] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[  111.768962][ T6241] Buffer I/O error on dev loop4, logical block 128, lost async page write
[  111.777789][ T6263] EXT4-fs (loop2): 1 truncate cleaned up
[  111.786237][ T6263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.803887][ T6243] syz.4.774: attempt to access beyond end of device
[  111.803887][ T6243] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[  111.817364][ T6243] Buffer I/O error on dev loop4, logical block 128, lost async page write
[  111.947385][ T6271] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=6271 comm=syz.5.782
[  111.996400][ T6271] FAULT_INJECTION: forcing a failure.
[  111.996400][ T6271] name failslab, interval 1, probability 0, space 0, times 0
[  112.009340][ T6271] CPU: 1 UID: 0 PID: 6271 Comm: syz.5.782 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  112.009372][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  112.009394][ T6271] Call Trace:
[  112.009402][ T6271]  <TASK>
[  112.009410][ T6271]  __dump_stack+0x1d/0x30
[  112.009435][ T6271]  dump_stack_lvl+0xe8/0x140
[  112.009457][ T6271]  dump_stack+0x15/0x1b
[  112.009506][ T6271]  should_fail_ex+0x265/0x280
[  112.009531][ T6271]  should_failslab+0x8c/0xb0
[  112.009559][ T6271]  __kvmalloc_node_noprof+0x123/0x4e0
[  112.009639][ T6271]  ? __se_sys_add_key+0x1e9/0x350
[  112.009671][ T6271]  __se_sys_add_key+0x1e9/0x350
[  112.009697][ T6271]  ? __secure_computing+0x82/0x150
[  112.009739][ T6271]  __x64_sys_add_key+0x67/0x80
[  112.009802][ T6271]  x64_sys_call+0x28c4/0x2ff0
[  112.009826][ T6271]  do_syscall_64+0xd2/0x200
[  112.009854][ T6271]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  112.009891][ T6271]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  112.009932][ T6271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.009955][ T6271] RIP: 0033:0x7fb03275ebe9
[  112.009974][ T6271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.009994][ T6271] RSP: 002b:00007fb0311c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  112.010017][ T6271] RAX: ffffffffffffffda RBX: 00007fb032985fa0 RCX: 00007fb03275ebe9
[  112.010032][ T6271] RDX: 00002000000009c0 RSI: 0000000000000000 RDI: 0000200000000040
[  112.010048][ T6271] RBP: 00007fb0311c7090 R08: 0000000037a93848 R09: 0000000000000000
[  112.010102][ T6271] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001
[  112.010116][ T6271] R13: 00007fb032986038 R14: 00007fb032985fa0 R15: 00007ffc6c9b66f8
[  112.010137][ T6271]  </TASK>
[  112.028973][ T6274] loop3: detected capacity change from 0 to 128
[  112.200579][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.216568][ T6274] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  112.307952][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.788'.
[  112.335463][ T6290] netlink: 'syz.4.786': attribute type 10 has an invalid length.
[  112.344250][ T6290] team0: Device hsr_slave_0 failed to register rx_handler
[  112.441216][ T6307] syz_tun: entered promiscuous mode
[  112.446615][ T6307] syz_tun: entered allmulticast mode
[  112.495787][   T29] kauditd_printk_skb: 187 callbacks suppressed
[  112.495799][   T29] audit: type=1400 audit(1756175025.193:4110): avc:  denied  { getopt } for  pid=6309 comm="syz.2.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  112.524636][   T29] audit: type=1326 audit(1756175025.223:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[  112.548882][   T29] audit: type=1326 audit(1756175025.223:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[  112.580998][   T29] audit: type=1326 audit(1756175025.223:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[  112.604515][   T29] audit: type=1326 audit(1756175025.223:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[  112.627907][   T29] audit: type=1326 audit(1756175025.223:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[  112.651375][   T29] audit: type=1326 audit(1756175025.223:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[  112.674844][   T29] audit: type=1326 audit(1756175025.223:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[  112.698335][   T29] audit: type=1326 audit(1756175025.223:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[  112.721773][   T29] audit: type=1326 audit(1756175025.223:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbea81debe9 code=0x7ffc0000
[  112.776006][ T6314] loop2: detected capacity change from 0 to 8192
[  112.890954][ T6320] loop2: detected capacity change from 0 to 512
[  112.915533][ T6320] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.004505][ T6325] netlink: 256 bytes leftover after parsing attributes in process `syz.5.797'.
[  113.124517][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.799'.
[  113.189550][ T6334] loop0: detected capacity change from 0 to 128
[  113.213241][ T6337] loop4: detected capacity change from 0 to 256
[  113.239016][ T6337] msdos: Unknown parameter 'Mots'
[  113.269835][ T6335] loop5: detected capacity change from 0 to 8192
[  113.285960][ T6337] bond1 (unregistering): Released all slaves
[  113.420030][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'.
[  113.446455][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.454185][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.463153][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.470565][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.664869][ T6351] loop0: detected capacity change from 0 to 512
[  113.758188][ T6358] loop4: detected capacity change from 0 to 512
[  113.788238][ T6358] EXT4-fs: Ignoring removed bh option
[  113.796670][ T6351] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  113.796940][ T6358] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  113.813679][ T6360] loop3: detected capacity change from 0 to 512
[  113.824965][ T6360] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[  113.849957][ T6364] loop3: detected capacity change from 0 to 512
[  113.852063][ T6351] EXT4-fs (loop0): orphan cleanup on readonly fs
[  113.873172][ T6358] EXT4-fs (loop4): 1 truncate cleaned up
[  114.016280][ T6351] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.802: corrupted inode contents
[  114.047602][ T6351] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.802: mark_inode_dirty error
[  114.063116][ T6351] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.802: corrupted inode contents
[  114.077349][ T6351] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.802: mark_inode_dirty error
[  114.094083][ T6351] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.802: corrupted inode contents
[  114.120893][ T6351] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  114.132146][ T6351] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.802: corrupted inode contents
[  114.165295][ T6351] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.802: mark_inode_dirty error
[  114.176988][ T6351] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  114.187859][ T6351] EXT4-fs (loop0): 1 truncate cleaned up
[  114.195968][ T6371] lo speed is unknown, defaulting to 1000
[  114.201895][ T6371] lo speed is unknown, defaulting to 1000
[  114.208140][ T6371] lo speed is unknown, defaulting to 1000
[  114.214465][ T6371] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  114.222462][ T6371] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  114.233367][ T6371] lo speed is unknown, defaulting to 1000
[  114.239766][ T6371] lo speed is unknown, defaulting to 1000
[  114.246053][ T6371] lo speed is unknown, defaulting to 1000
[  114.252530][ T6371] lo speed is unknown, defaulting to 1000
[  114.259081][ T6371] lo speed is unknown, defaulting to 1000
[  114.281494][ T3661] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 1
[  114.367210][ T6373] loop2: detected capacity change from 0 to 512
[  114.437139][ T6373] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  114.487925][ T6373] EXT4-fs (loop2): 1 truncate cleaned up
[  114.651754][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.813'.
[  114.686097][ T6380] loop2: detected capacity change from 0 to 512
[  114.709100][ T6380] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  114.739425][ T6380] EXT4-fs (loop2): 1 truncate cleaned up
[  114.745519][ T6385] random: crng reseeded on system resumption
[  114.829252][ T6392] netlink: 256 bytes leftover after parsing attributes in process `syz.5.819'.
[  114.879136][ T6394] loop3: detected capacity change from 0 to 512
[  114.965007][ T6394] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.193213][ T6401] loop4: detected capacity change from 0 to 8192
[  115.198210][ T6412] loop0: detected capacity change from 0 to 512
[  115.230894][ T6412] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.248408][ T6416] loop2: detected capacity change from 0 to 512
[  115.264448][ T6412] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #18: comm +}[@: corrupted inode contents
[  115.276754][ T6412] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #18: comm +}[@: mark_inode_dirty error
[  115.277030][ T6416] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  115.288470][ T6412] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #18: comm +}[@: corrupted inode contents
[  115.320025][ T6416] EXT4-fs (loop2): 1 truncate cleaned up
[  115.326710][ T6412] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm +}[@: mark_inode_dirty error
[  115.380441][ T6412] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm +}[@: mark inode dirty (error -117)
[  115.421883][ T6412] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117)
[  115.470002][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'.
[  115.566118][ T6416] SELinux: failed to load policy
[  115.733904][ T6431] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  115.877197][ T6440] loop5: detected capacity change from 0 to 512
[  115.935972][ T6437] loop0: detected capacity change from 0 to 8192
[  115.996609][ T6445] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  116.088989][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.5.839'.
[  116.143929][ T6455] loop5: detected capacity change from 0 to 512
[  116.153995][ T6455] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  116.187615][ T6455] EXT4-fs (loop5): 1 truncate cleaned up
[  116.308483][ T6456] loop0: detected capacity change from 0 to 8192
[  116.416728][ T6467] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[  116.453884][ T6467] SELinux: failed to load policy
[  116.514104][ T6469] netlink: 'syz.4.843': attribute type 10 has an invalid length.
[  116.526984][ T2993] ==================================================================
[  116.535211][ T2993] BUG: KCSAN: data-race in dentry_unlink_inode / step_into
[  116.542437][ T2993] 
[  116.544866][ T2993] write to 0xffff88811a1d46f0 of 8 bytes by task 3833 on cpu 0:
[  116.552513][ T2993]  dentry_unlink_inode+0x65/0x260
[  116.557563][ T2993]  d_delete+0x164/0x180
[  116.561726][ T2993]  d_delete_notify+0x32/0x100
[  116.566412][ T2993]  vfs_unlink+0x30b/0x420
[  116.570739][ T2993]  do_unlinkat+0x24e/0x480
[  116.575243][ T2993]  __x64_sys_unlink+0x2e/0x40
[  116.579929][ T2993]  x64_sys_call+0x2dc0/0x2ff0
[  116.584603][ T2993]  do_syscall_64+0xd2/0x200
[  116.589142][ T2993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.595157][ T2993] 
[  116.597557][ T2993] read to 0xffff88811a1d46f0 of 8 bytes by task 2993 on cpu 1:
[  116.605282][ T2993]  step_into+0x122/0x820
[  116.609535][ T2993]  walk_component+0x162/0x220
[  116.614215][ T2993]  path_lookupat+0xfe/0x2a0
[  116.618724][ T2993]  filename_lookup+0x147/0x340
[  116.623493][ T2993]  do_readlinkat+0x7d/0x320
[  116.627991][ T2993]  __x64_sys_readlink+0x47/0x60
[  116.633010][ T2993]  x64_sys_call+0x28da/0x2ff0
[  116.637696][ T2993]  do_syscall_64+0xd2/0x200
[  116.642199][ T2993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.648102][ T2993] 
[  116.650423][ T2993] value changed: 0xffff88811a6991f0 -> 0x0000000000000000
[  116.657527][ T2993] 
[  116.659844][ T2993] Reported by Kernel Concurrency Sanitizer on:
[  116.665989][ T2993] CPU: 1 UID: 0 PID: 2993 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[  116.675533][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  116.685590][ T2993] ==================================================================
[  116.705981][ T6469] team0: Device hsr_slave_0 failed to register rx_handler
[  116.762293][ T6480] netlink: 'syz.0.844': attribute type 10 has an invalid length.
[  116.820781][ T6480] team0: Device hsr_slave_0 failed to register rx_handler
[  117.329896][ T6460] Set syz1 is full, maxelem 65536 reached
[  117.822490][ T6468] Set syz1 is full, maxelem 65536 reached